It security and compliance analyst

IT Security and Compliance Analyst York - Hybrid (2-3 days per week on-site) 12 months Main Purpose: Provide Security Compliance support to the NiM businesses and IT incl. relevant contribution to agreed IT support model, operational sustain incl. incident and request management, Market Security Compliance Indicator (MSCI) measure and Information Security Management (ISMS) contribution. Key Outputs: Sustain the IT product portfolio, across all UKI NiM (Nestle in the Market) businesses, by providing first level support, incorporating the Service Portal and subject matter experts, to agreed targets and SLO, ensuring Compliance by following relevant GLOBE Standards and Policies, incl. Nestl eacute; IT Security Policy and Cyber Securirty Awareness Supporting the Security Compliance Specialists with ownership or support of relevant MSCI measures and ISMS controls Providing support to the Market Role Coordinator for GLOBE SAP Security sustain and projects Supporting the application compliance process and governance framework for solution onboarding. Specifically supporting facilitation of the Control Decision Tree, application controls and supporting IT application owners to supply adequate evidence whilst providing guidance on required remediation. Sustaining the IT Software Asset Management Standard, with specific support where required (incl. supporting SAM Service Functional Owners, compliance evidence, ensuring SAM compliant process and behaviours) Maintain knowledge in key areas of Security Compliance to ensure cross-skilling and sufficient cover for team members Supporting the IT and business to ensure we are #39;In Control #39; inc. IT Standards controls Key Relationships External to Nestle Group: External Auditors when requested (e.g. Ernst Young) External suppliers as needed (e.g. SAP, HP etc.) Work with external customers and vendors to ensure compliance Main Purpose of Job: Some experience of IT Security and Compliance (incl. MSCI and ISMS) Evidence of delivering results Good working knowledge of IS/IT systems processes Experience and knowledge of Audits and Risk Assessments Good understanding of key IS/IT Security policies Good understanding of all IT Security Compliance Standards (incl. RISE, Cloud, Digital etc.) Ability to deliver training or Present to employees Knowledge: Core knowledge of the 10 Nestl eacute; Corporate Business Principles and expert knowledge in our areas of responsibility. Good understanding of the Nestl eacute; UKI NiM business. Basic knowledge of inter-relationship of NiM businesses, key functions and their key priorities. Good knowledge of Nestl eacute; Management and Leadership Principles. Good understanding of IIRM (Interaction, Incident Request Management Best Practice) Effective prioritisation (Able to assess impact on a Business impacting incident and prioritise accordingly) Good Knowledge of Nestl eacute; IT Security Compliance standard requirements (End User Security, RISE, Cloud own subject matter compliance requirements) Randstad Business Support is acting as an Employment Business in relation to this vacancy