Technology and Third-Party Risk Management Specialist
hace 7 horas
Sant Just Desvern
City: Sant Just Desvern State: Barcelona (ES-B) Country: Spain (ES) Requisition Number: 45350 The Technology and Third-Party Risk Management Specialist demonstrates a high level of professionalism, prioritizing the effective management of cybersecurity governance, risk, and compliance activities. This role will perform, and continuously improve Risk Management assessments, risk registration, prioritized risk remediation, third party and application evaluations, and will maintain the risk register in Bunge’s Governance, Risk and Compliance automation to support the overall effectiveness of the BT organization in alignment with Risk Management standards (e.g., NIST 800-30, 800-37, NIST CSF 2.0). • Serve as liaison to coordinate Governance, Risk, and Compliance activities with key stakeholders to enable effective Cybersecurity, risk assessment, risk registering exceptions management, issue management and the alignment against applicable industry best practices (e.g. NIST, ISO, COBIT, PCI DSS) as needed., • Define and identify control gaps, provide recommendations for control process improvements, and support control owners’ corrective action plans for remediation., • Conduct risk assessments, internal audits, and investigations to identify and address potential compliance issues., • Conduct end-to-end third-party risk assessments, including inherent risk, due diligence reviews, and ongoing monitoring of vendors and service providers., • Perform risk analysis and document findings, including identification of control gaps, risk ratings, and recommended remediation actions aligned with organizational risk appetite., • Track and follow up on remediation activities for identified vendor risks, ensuring timely closure and proper documentation of risk treatment or acceptance., • Stay informed on evolving regulatory requirements, cybersecurity threats, and industry best practices related to third-party and supply chain risk., • Participate in continuous improvement initiatives, including automation, process optimization, and integration of TPRM within broader enterprise risk management frameworks., • Provide subject matter expertise on third-party risk management concepts and advise stakeholders on risk-based decision-making., • Effectively utilize process automation and reporting through Bunge’s Governance, Risk and Compliance (GRC) automation – Optro Infosec., • Actively collaborate and support partner functions across Bunge’s Governance, Risk and Compliance functions, and with stakeholders throughout BT and Cybersecurity., • Executes short to mid-term strategic initiatives driven by the department, including collaboration with partner Governance, Risk and Compliance functions., • Recognized as an expert, both internally & external to Bunge in the design, performance and continuous improvement of governance, risk and compliance related services and capabilities., • Supports the evaluation, prioritization, registration, monitoring, and mitigation of risks and compliance and control deficiencies through collaboration with various functions within BT and across various Bunge business stakeholder groups (e.g., Internal Audit, Legal, Compliance, Privacy)., • Leverage industry experience and knowledge of applicable best practices, frameworks, and guidance to define effective programs, monitor and strengthen internal controls, risk-prioritize requisite remediation, and to improve the overall posture of Bunge’s BT and Cybersecurity internal control environment., • Solve highly complex, multidimensional problems that require extensive investigation and advanced application of expertise to determine root cause, to advise leadership on appropriate remediation methods, and to mitigate or remediate internal controls to an acceptable level of residual risk, across various functional areas of Business Technology and Cybersecurity, including longstanding or unprecedented improvements without a historical precedent., • Leverage both a measured reactive and a deliberate proactive approach to the assurance and continuous improvement of BT and Cybersecurity internal controls, staying informed of emerging industry trends and techniques and changes in regulations to ensure continuous compliance., • Effectively partner with colleagues within Bunge’s Governance, Risk and Compliance function, across BT and Cybersecurity, and with various business stakeholders to ensure the adequacy and sufficiency of internal controls and supporting capabilities., • Actively contribute to large global projects that include governance, risk and compliance related capabilities and scope to ensure adherence to applicable policies, assurance of control performance, and the achievement of team and program goals., • Educate BT leadership and functional areas about design adequacy, operating effectiveness, and techniques to ensure continuous compliance and improvement over their internal controls., • Bachelor's degree in computer science or information systems, risk management, accounting, finance, or equivalent combination of education and work experience., • 7+ years of experience in compliance and controls assurance, internal audit, or a related field., • Extensive knowledge of IT/Cyber Risk Management practices and frameworks required., • Demonstrated experience in the monitoring and improvement of Information Technology general controls, Cybersecurity controls, and/or compliance programs required., • Solid understanding of Governance, Risk and Compliance methodologies and effective automation through GRC tooling., • Nice to have: Experience with Optro InfoSec preferred (i.e., Cyber Risk Management and Third-Party Risk Management modules)., • Proven experience implementing Information Technology and Cybersecurity frameworks required. Possible examples include, but not limited to: COBIT, NIST CSF 2.0, ISO 27k, NIST 800-30, NIST 800-37, NIST 800-161, NIST 800-53., • Certifications such as CISA, CRISC, CGEIT or CISSP preferred., • Ability to manage and execute numerous parallel activities in a fast-paced, dynamic environment., • Ability to build and maintain constructive and collaborative working relationships with a diverse community throughout the organization., • Ability to effectively communicate and articulate risk management in both written and verbal manner to influence both technical and non-technical audiences at all levels of the company including executives., • Excellent analytical and problem‑solving skills., • Actively shapes our company culture (e.g., supporting employee resource groups, mentoring employees, volunteering, joining cross‑functional projects)., • Champions our cultural norms (e.g., willing to have cameras when it matters, helping onboard new team members, building relationships, etc.)., • Demonstrate a company ownership mindset, thinking beyond boundaries of their own area and responsibilities., • Ability to work with limited direct management to participate in governance, risk and compliance related efforts, improve practices, coordinate cross‑functional activities and to successfully deliver strategic outcomes., • Recognized as an expert in risk management and third‑party risk management., • Can apply both a measured reactive and a deliberate proactive approach to the assurance and continuous improvement of BT and Cybersecurity internal controls, staying informed of emerging industry trends, risks and techniques and changes in regulations to ensure continuous compliance., • Leverage industry experience and knowledge of applicable best practices (e.g., COBIT, NIST CSF, ISO 27k, NIST 800-30, NIST 800-37, NIST 800-161, NIST 800-53) frameworks, and guidance to establish effective governance, strengthen internal controls, risk‑prioritize requisite remediation, and to improve the overall posture of Bunge’s BT and Cybersecurity programs., • Apply expertise to determine root cause, to advise leadership on appropriate remediation methods, and to mitigate or remediate internal controls to an acceptable level of residual risk, across various functional areas of Business Technology and Cybersecurity, including longstanding or unprecedented improvements without a historical precedent., • Ability to work independently and as part of a cross‑functional team. #J-18808-Ljbffr
Camareros
Ventas y Marketing
Chef y Cocinero
Venta Minorista
Estética y Belleza
Construcción y Obras
Comida Rápida
Almacén
Arte, Medios de Comunicación, Diseño
Atención Sanitaria
Ayudante de Cocina
Azafato y Azafata
Barista
Ciencia
Contabilidad y Finanzas
Cuidado de animales
Cuidado de niños
Deportes y Bienestar
Educación
Entretenimiento
Eventos y Promociones
Gerencia
Industria y Producción
Ingenieria
Limpieza
Moda
Oficina y Administración
Personal de Bar
Redacción y Edición
Seguridad
Servicio al Cliente
Servicios Jurídicos
Tecnología de la información
Trabajos en línea
Transporte y Reparto
Otros
