Information Security Management System & Compliance Manager (12-months contract) Job Details | Nestle Operational Services Worldwide SA

Nestle International - North York, CA

Full-time

North York, CA

Merchant Wholesalers, Nondurable Goods

About the position

We are seeking a skilled and experienced Information Security Management System & Compliance Manager to join our dynamic team. The ideal candidate will be responsible for overseeing and ensuring the integrity, confidentiality, and availability of our information security management system (ISMS). This role involves developing, implementing, and maintaining security policies and compliance frameworks to ensure the protection of information assets and adherence to relevant regulations and standards. The manager will work closely with various stakeholders to promote a culture of security and compliance throughout the business unit.

Responsibilities

• Design, implement, and maintain the ISMS in alignment with ISO/IEC 27001 standards.
• Regularly review and update procedures, and controls to ensure ongoing compliance with Nestlé Global Standards, and local regulatory requirements.
• Conduct risk assessments to identify potential security threats and vulnerabilities and develop mitigation strategies.
• Collaborate with cross-functional teams to ensure security policies are integrated into all business processes.
• Collaborate with business stakeholders to identify required security controls, and ensuring risk assessments are conducted and controls have been implemented prior to transitioning technology platforms to the unit's environment.
• Ensure the unit meets all relevant legal, regulatory, and contractual obligations related to information security and participate actively in vendor management.
• Prepare the unit for, support, and manage internal and external audits, including ISO/IEC 27001 certification and surveillance audits.
• Develop and maintain documentation required for compliance audits and certifications.
• Coordinate with external auditors and facilitate the audit process, addressing any findings or non-conformities.
• Support the delivery of training programs to educate employees on information security policies, procedures, and best practices.
• Promote a culture of security awareness within the functional unit.
• Support regular security awareness campaigns and workshops.

Requirements

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Minimum of 3+ years of experience in information technology or combination of risk management, compliance, information security and IT jobs.
• Understanding of ISO/IEC 27001, NIST Cybersecurity Framework and other relevant standards and regulations.
• Experience with risk assessment and management, process and control implementation.
• Strong communication and interpersonal skills, to deliver effective understanding of requirements, fostering consensus, and cultivating relationships with stakeholders across the organization.

Nice-to-haves

• Relevant certifications such as CRISC, or ISO/IEC 27001 Lead Implementer/Auditor are highly desirable.
• In-depth knowledge of information security principles, practices, and technologies.
• Strong analytical and problem-solving skills.
• Strong sense of curiosity, proactive, and demonstrates a proven ability to take initiative.
• Ability to work independently and as part of a team.
• High attention to detail and organizational skills.
• Proven ability to manage multiple initiatives and deadlines effectively.
• Strength in prioritizing and managing your own workload to deliver quality results and meet timelines with limited guidance.