IT Risk, Data Protection Sme

**Position - **IT Risk, Data Protection SME**

**About Us**:
Huggies®. Kleenex®. Cottonelle®. Scott®. Kotex®. Poise®. Depend®. K-C Professional®. You already know our legendary brands—and so does the rest of the world. In fact, 25% of people in the world use Kimberly-Clark products every day, and it takes the absolute best people to make that happen.

We’re founded on 150 years of market leadership, and we’re always looking for new and better ways to perform, especially when it comes to product and process innovation. Our customers are always looking for new and better. Our competitors won’t stop evolving. And our communities demand responsible corporate practices. We need bold, transformative ideas from people who can turn them into reality. That means there’s no time like the present to make an impact here. It’s all waiting for you at Kimberly-Clark; you just need to log on

**Led by Purpose, Driven by You.**

**ESSENTIAL FUNCTIONS**:

- Collaborates with the vendor relationship managers (procurement) and business owners to request necessary and appropriate due diligence documentation for all New Vendor relationships based on services being provided. Will also ensure that the appropriate third-party vendor risk assessments have been completed and are responsible for quality control and assurance and/or credible challenges of those assessments.
- Works directly with procurement and business to coordinate due diligence efforts on all critical vendors.
- Performs appropriate and timely follow up of outstanding due diligence items for all new and existing vendor relationships.
- Collaborates with CS&A TRM team regarding the review and approval of VCRA Security Questionnaire.
- Develops strong relationships with vendor relationship managers (procurement) and business owners to ensure visibility and understanding of key vendor risk areas.
- Understand data protection capabilities, such as encrypting data in motion and data at rest, DLP, data integrity.
- Define objectives, technical work, and timeline for developing data protection capabilities, roadmaps, and requirements.
- Build relationships with business, program, engineering, operations, and security to understand how to develop plans that effectively manage security risks.
- Communicate progress, findings, and ensure successful handoff of deliverables to program and operational teams.
- Build domain knowledge of Kimberly-Clark’s environment to understand long-term risk areas that will develop as the systems evolve.

**MINIMUM REQUIREMENTS**:

- Bachelor’s degree
- 3-5 years of relevant work experience.
- Proven understanding of risk assessment methodologies, frameworks, and procedures such as NIST Cyber Security Framework and ISO27001.
- Experience in conducting third-party vendor risk assessments and must have expertise in vendor onboarding process.
- Experience in data protection security and its functional components.
- Ability to work in a virtual team which may work across distance (remote), cultures and time zones, in a matrix with multiple reporting lines, and may extend outside the K-C organization including suppliers, partners and customers.
- Strong interpersonal skills and ability to communicate effectively with business partners and procurement.
- Ability to effectively interact globally with all areas and levels of the organization, such as legal, marketing, business operations.
- Ability to work independently on multiple high-priority projects.
- Ability to manage multiple high-visibility, complex technical projects.
- Strong problem-solving and critical thinking skills.
- Knowledge with the security domains of security engineering, IAM, asset/network/data security, software development, assessment, testing, and operations.
- Experience building security architectures, roadmaps, and program requirements.
- Familiarity with defining cybersecurity policies.

**PREFERRED QUALIFICATIONS**
- Certifications/security designation(s) not required but good to have: CISA, CISSP, CISM.
- A degree in a STEM field, (Computer Science, Data Science, or Computer Engineering).
- Digital Transformation disciplines such as artificial intelligence, machine learning, cloud computing, etc.
- Knowledge of global data privacy regulations such as GDPR, CCPA.

**About You**:
You were made to do this work: designing new technologies, diving into data, optimizing digital experiences, and constantly developing better, faster ways to get results. You want to be part of a performance culture dedicated to building technology for a purpose that matters. You want to work in an environment that promotes sustainability, inclusion, wellbeing, and career development.

You’re also a college graduate with a degree in technology or related area, authorized to work in the United States, and have at least two years of continuous work experience.

You love what you do, especially when your work makes a difference. At Kimberly-Clark, we’re constantly explori