Support the Implementation of up-to-date “Dole” frameworks for Risk, Privacy & Compliance management base on best practices as COBIT, ITIL, NIST, ISO and Gartner. Interact with the other functions and areas within Global IT, Local IT and the line-of-business accordingly to ensure adequate understanding and the consistent application of policies, standards, processes, framework and practices for proper Risk, Privacy & Compliance Management, as established. Coordinate and support activities with the Global IT Risk, Privacy and Compliance Director.

• Support the implementation of the Global IT Risk, Privacy and Compliance strategy and frameworks.

• Coordinate and support Global IT and BU’s Local IT functions on risk and compliance matters such BCC Cycles and GCC Cycle activities plus emerging IT risks, IT Audits (internal and external) and control activities related.

• Leads the design, implementation, and continuous monitoring of IT Risk, Privacy and Compliance control activities.

• Support the coordination of Global IT and ICFR testing and audits activities in conjunction with relevant functions and third parties.

• Regular reporting preparation on status and performance of Risk, Privacy & Compliance area

• Development and implementation of Global IT policies, standards, processes, procedures, and guidelines, and Remediation Plans in conjunction with the Global IT Office.

• Implement, and monitor a targeted Risk, Privacy & Compliance training program for employees, contractors, and users as applicable.

• Coordinates and support Global IT Risk, Privacy and Compliance assessments and scope controls selection activities.

Requirements:

• 5 years of full-time work experience in IT Audit, Risk & Compliance management and/or related functions (such as Information Security, IT Regulations, SOX).
• Typically, a background in technical IT Audit with a clear and abiding interest in Information Security Risk and Compliance with IT Regulations.
• BS in Computer Science or related field
• Advanced English
• Ability to communicate technical relevant information to non-technical personnel.
• Strong in documentation and reporting
• Knowledge of frameworks such as SOX IT Control Objectives, COBIT, ITIL, NIST, ISO 2700x
• Required qualification: CISA (Certified Information System Auditor)