2 jobs for "Director, Risk Management: Cyber & Third Party Risk"

Cybersecurity Senior Analyst

At Mars Incorporated - Remote / Flexible

Posted on Oct 28

View job Apply on company site

Senior Insider Risk Analyst

At Experian - Remote / Flexible

Posted on Nov 6

View job Apply on company site

Mars Incorporated

Cybersecurity Senior Analyst

Remote / FlexiblePosted 13 days ago

Apply on company site View full job

Job Description:

Cybersecurity Senior Analyst | Mars Digital Technologies | Guararema

The Segment Security Cybersecurity Senior Analyst plays a pivotal role in protecting and enabling Mars Segment & business unit growth initiatives. This role bridges strategic security planning, technical deployment, and governance by overseeing the onboarding and integration of new acquisitions and segment initiatives.

The primary mission is to ensure robust security control coverage across all acquisition environments, co-create strategic security roadmaps, drive compliance embedding and remediation governance, and facilitate end-to-end cyber governance and project delivery across business units and acquired entities. This is an exciting opportunity to contribute to Mars Snacking mission while advancing your career in cybersecurity.

What will be your key responsibilities?

• Security Control Assessment & Coverage: Lead comprehensive evaluations of existing architectures, systems, and processes across acquired business units to ensure full baseline security control coverage (e.g., identity, endpoint, perimeter, vulnerability management, cloud).

• Strategic Roadmap Development: Partner closely with acquisition leadership, business unit stakeholders, and the Cyber Security Director to co-create, prioritize, and maintain tailored multi-phase security roadmaps for onboarding and integration.

• Control Deployment Oversight: Manage and oversee the technical implementation and operational rollout of enterprise security tools, services, and fit-for-purpose capability models across acquisitions and segment environments.

• Compliance Embedding: Ensure segment-wide and acquisition alignment with Mars global security policies, standards, and regulatory frameworks (e.g., NIST CSF).

• Risk Management - Gap Identification & Escalation: Proactively identify, assess, and document compliance gaps and architectural deficiencies during onboarding and ongoing assessments; escalate critical security and compliance risks to segment leadership and the Cyber Security Director.

• Risk Management - Action Plans & Risk Ownership: Formalize remediation action plans with clear ownership, target completion milestones, and tracking mechanisms within the enterprise risk register, ensuring business unit accountability.

• Risk Management - Connect Segment Enterprise Risk Management risks with the global cyber risks ensuring risk response is consistent and aligned with enterprise risk tolerance levels.

• Governance Facilitation: Organize and lead regular cyber security governance forums and reviews across segments and acquisitions to report on integration maturity, open vulnerabilities, and compliance milestones.

• GRC Collaboration: Partner with the central Governance, Risk, and Compliance (GRC) team to adopt and operationalize standardized tools, reporting templates, and risk treatment protocols across business units.

• Change Enablement: Define and implement security change management strategies that drive adoption, reduce operational disruption, and support and champion security-first culture across Mars Segments & acquisitions.

• Stakeholder Engagement: Serve as the primary liaison between Global Digital Operations (GDO), regional digital teams, segment leadership, and acquisition personnel, translating technical risks into clear business implications.

. Project Management: Bring solid organization, structure, and governance to small and medium sized projects deploying security controls and/or security program initiatives that support the Segment Security mission and strategy.

Qualifications:

. Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).

• Preferred Certifications: Security certifications such as CompTIA Security+, CISM, CRISC, CISSP, or project management certifications (PMP, PMI-ACP, Agile/Scrum) are strongly preferred.

• Experience: 3-5+ years of experience in Cyber Security, Information Security Project Management, or IT Risk and Compliance roles.

• M&A / Acquisition Security: Demonstrated experience or strong familiarity with security integrations, M&A due diligence/onboarding, or technical control deployments in distributed enterprise environments.

• Security Controls & Architecture: Strong fundamental knowledge of security controls across enterprise operating platforms (Windows, Linux), cloud infrastructure, network architecture, and identity/access management (IAM).

• Frameworks & Standards: Familiarity with industry security standards and frameworks (NIST CSF, ISO 27001) and IT Service Management / ITIL principles.

• Project & Change Management: Proven track record of managing technical cross-functional projects, managing conflicting priorities, and applying change management principles to drive technology adoption.

• Communication & Influencing: Strong analytical, communication, and executive presentation skills with the ability to articulate risk, build consensus, and influence stakeholders across both technical and business functions.

What can you expect from Mars?

Work with diverse and talented Associates, all guided by the Five Principles.
Join a purpose driven company, where we're striving to build the world we want tomorrow, today.
A strong focus on learning and development support from day one, including access to our in-house Mars University.
An industry competitive salary and benefits package, including company bonus.

#TBdigital

#Onsite

About Mars Incorporated

Size: 10,000+ employees
Industry: Consumer Goods & Services

View company profile