Unilever - Assistant Manager - Functional Platform Information Security

MAIN JOB PURPOSE

It is our Secure by Design Team that assess the security of new IT Solutions and it is on this team that we are recruiting for an individual with knowledge and experience pertaining to CD, Marketing, Consumer Engagement and/or eCommerce IT Applications and Platforms. The role will report into the Information Security Functional Platform Manager for CD, Marketing, Consumer, and eCommerce.

The individual will require a sound level of knowledge and understanding of the technologies used by our CD, Marketing, Consumer Engagement and/or eCommerce organizations and understand and ensure compliance with the Unilever Information Security framework.

The key to the role is the ability to understand complicated IT initiatives and overlay Unilever's information security requirements, communicating the requirements in a clear and consistent manner to project stakeholders. Rigour and depth of security assessment must be balanced against the needs of the IT Organisation - practicality and pragmatism are paramount to the effectiveness of this role.

JOB SUMMARY

Within the scope of responsibilities, the Functional Platform Information Security Analyst is responsible for;

Engagement

Partnering the IT Platform Teams for CD, Marketing, Consumer Engagement and eCommerce IT in relation to all aspects pertaining to Information Security.

Understanding respective technology roadmaps for the functions stated above and being aligned with upcoming projects and innovations.

Working with the respective IT Platform Teams to ensure that key Information Security and Privacy Regulations and effectively, for example, ensuring that the General Data Protection Regulation (GDPR) and PCI Compliance are adhered to.

Manage project and stakeholder expectations pertaining to Information Security processes.

Technology Awareness

Developing a good working knowledge in relation to the Applications and Foundation Platforms being used within our CD, Marketing,

Consumer Engagement and eCommerce IT organization.

Understand key Information Security considerations in relation to these Applications and Platforms, including key themes around Info Sec pertaining to Cloud Services including AWS, Adobe Marketing Cloud, and SalesForce.

Recognize the developing eCommerce / DTC landscape and the technology components which form the eCommerce Platform, looking towards how Info Sec need to adapt and support this fast innovating area.

In relation to the technologies above, building knowledge and understanding in relation to the IT Security controls around these products.

Secure by Design

Support our CD, Marketing, Consumer Engagement and eCommerce IT organizations through relevant Information Security processes.

Take a lead in progressing new projects through the Secure by Design (SBD) processes, for example, leading Criticality Assessments and driving

Information Security Assessments to completion.

Support the projects in meeting requirements from Information Security compliance and provide support in relation to sign-off prior to go-live of the projects.

Manage any non-compliance to Information Security requirements and ensure that the impacts and risks are documented, managed and understood by key stakeholders.

Ensure that compliance KPI for platforms is available and that these are shared with platform teams including ownership for resolving issues.

Ensure that solutions are appropriately handed over to the Information Security Operations Team.

Crown Jewels & Personal Data

Support the Platform Team and Information Security Functional Platform Manager in designing and delivering Crown Jewels reporting.

Lead remediation activities across platform team to ensure appropriate compliance levels, with regular reviews and health assessments in place.

Support the identification of Personal Data assets alongside Global Data Governance Team and wider Info Sec Team.

KEY REQUIREMENTS:

Skills and competencies:

Strong communication and stakeholder management at management level.

Proven ability to influence others, especially outside of an Information Security audience.

Excellent time management, prioritization of tasks and quality of delivery.

Working with geographically distributed teams.

An understanding and knowledge-base in relation to a quorum of technologies identified above.

An understanding and knowledge-base in relation to Cloud (PaaS and/or SaaS) solutions.

Understanding of Information Security control frameworks (e.g. ISO27000) or relevant Data Regulations (such as European Data Protection Regulation or EU GDPR) would be an advantage.

Understanding of Payment Card Industry Data Security Standard's (PCI) DSS would be an advantage.

Relevant experience

The experience of working within an IT function partnering CD, Marketing, Consumer Engagement and/or eCommerce functions within a large organization will be an advantage.

A sound and broad knowledge of all, or a subset, of the technologies highlighted throughout this role profile.

The applicant should have either have worked within Information Security or have a distinct and demonstrable passion to enter an Information Security role.