D&T Analyst II – Cyber Security, Third Party Risk

:

India is among the top ten priority markets for General Mills, and hosts our Global Shared Services Centre. This is the Global Shared Services arm of General Mills Inc., which supports its operations worldwide. With over 1,300 employees in Mumbai, the center has capabilities in the areas of Supply Chain, Finance, HR, Digital and Technology, Sales Capabilities, Consumer Insights, ITQ (R&D & Quality), and Enterprise Business Services. Learning and capacity-building is a key ingredient of our success.

Job Description:

Position Title

D&T Analyst II – Cyber Security, Third Party Risk

Function/Group

Digital & Technology

Location

Mumbai

Shift Timing

Regular

Role Reports to

D&T Manager – Cyber Security, Enterprise Vulnerability Management

Remote/Hybrid/in-Office

Hybrid

ABOUT GENERAL MILLS

We make food the world loves: 100 brands. In 100 countries. Across six continents. With iconic brands like Cheerios, Pillsbury, Betty Crocker, Nature Valley, and Häagen-Dazs, we've been serving up food the world loves for 155 years (and counting). Each of our brands has a unique story to tell.

How we make our food is as important as the food we make. Our values are baked into our legacy and continue to accelerate

us into the future as an innovative force for good. General Mills was founded in 1866 when Cadwallader Washburn boldly bought the largest flour mill west of the Mississippi. That pioneering spirit lives on today through our leadership team who upholds a vision of relentless innovation while being a force for good. For more details check out

General Mills India Center (GIC) is our global capability center in Mumbai that works as an extension of our global organization delivering business value, service excellence and growth, while standing for good for our planet and people.

With our team of 1800+ professionals, we deliver superior value across the areas of Supply chain (SC) , Digital & Technology (D&T) Innovation, Technology & Quality (ITQ), Consumer and Market Intelligence (CMI), Sales Strategy & Intelligence (SSI) , Global Shared Services (GSS) , Finance Shared Services (FSS) and Human Resources Shared Services (HRSS).For more details check out

We advocate for advancing equity and inclusion to create more equitable workplaces and a better tomorrow.

JOB OVERVIEW

Function Overview

The Digital and Technology team at General Mills stands as the largest and foremost unit, dedicated to exploring the latest trends and innovations in technology while leading the adoption of cutting-edge technologies across the organization. Collaborating closely with global business teams, the focus is on understanding business models and identifying opportunities to leverage technology for increased efficiency and disruption. The team's expertise spans a wide range of areas, including AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain, SAP S4 HANA and Enterprise Architecture. The MillsWorks initiative embodies an delivery model, where business and technology teams operate cohesively in pods with a unified mission to deliver value for the company. Employees working on significant technology projects are recognized as Digital Transformation change agents.

The team places a strong emphasis on service partnerships and employee engagement with a commitment to advancing equity and supporting communities. In fostering an inclusive culture, the team values individuals passionate about learning and growing with technology, exemplified by the "Work with Heart" philosophy, emphasizing results over facetime. Those intrigued by the prospect of contributing to the digital transformation journey of a Fortune 500 company are encouraged to explore more details about the function through the following Link

Purpose of the role

This role is responsible for performing security risk assessments within the General Mills Third Party Security program. This role provides support to managing third party relationships and obtaining the necessary data to assess their security posture. Being an individual contributor the analyst in this role would be responsible for providing consultation to business users for TPSRA processes.

KEY ACCOUNTABILITIES

• Perform hands-on Third Party Security Risk Assessments, remediation, and escalations in accordance with established SLAs. Work on building a clear understanding of the processes and procedures as well.

• Develop a clear understanding of the tool used for performing TPSRA assessments.

• Stakeholder Management: Build and maintain strong relationships with key stakeholders across the organization

• Building awareness amongst stakeholders about Third Party Risk Management

• Continuous Improvement: Regularly review the third-party security risk management processes to Identify and propose areas for improvement. This will ensure its effectiveness and alignment with business objectives

• Support GRC capabilities to identify and develop associated plans for emerging threats and risks trends.

MINIMUM QUALIFICATIONS

• 5+ years of experience working in cyber security, cyber security technology, risk assessment and management
• Bachelor's degree in computer science/Electronics/Electrical

Specific Job Experience or Skills needed:

• Proven experience in managing Third-Party Security Risks
• Extensive experience conducting risk assessments and developing remediation plans.
• Strong understanding of information security principles, best practices, and frameworks (e.g., NIST CSF, ISO 27001, SOC 2)
• Experience working with vendors and managing vendor relationships.

Competencies/Behaviors required for Job:

• Strong learning agility and willing to learn new tools and technologies.
• Ability to prioritize and complete multiple tasks on tight deadlines
• Strong communication skills with ability to communicate complex issues to a diverse audience
• Self-starter with ability to drive an item from concept to full implementation independently
• Excellent teamwork, and collaboration mindset.