Assistant DandT Manager Cyber Security Third Party Risk

Position Title

Assistant D&T Manager – Cyber Security, Third Party Risk

Function/Group

Digital & Technology

Location

Mumbai

Shift Timing

Regular

Role Reports to

D&T Manager – Cyber Security, Enterprise Vulnerability Management

Remote/Hybrid/in-Office

Hybrid

About General Mills

We make food the world loves: 100 brands. In 100 countries. Across six continents. With iconic brands like Cheerios, Pillsbury, Betty Crocker, Nature Valley, and Häagen-Dazs, we’ve been serving up food the world loves for 155 years (and counting). Each of our brands has a unique story to tell.

How we make our food is as important as the food we make. Our values are baked into our legacy and continue to accelerate

us into the future as an innovative force for good. General Mills was founded in 1866 when Cadwallader Washburn boldly bought the largest flour mill west of the Mississippi. That pioneering spirit lives on today through our leadership team who upholds a vision of relentless innovation while being a force for good. For more details check out http://www.generalmills.com

General Mills India Center (GIC) is our global capability center in Mumbai that works as an extension of our global organization delivering business value, service excellence and growth, while standing for good for our planet and people.

With our team of 1800+ professionals, we deliver superior value across the areas of Supply chain (SC) , Digital & Technology (D&T) Innovation, Technology & Quality (ITQ), Consumer and Market Intelligence (CMI), Sales Strategy & Intelligence (SSI) , Global Shared Services (GSS) , Finance Shared Services (FSS) and Human Resources Shared Services (HRSS).For more details check out https://www.generalmills.co.in

We advocate for advancing equity and inclusion to create more equitable workplaces and a better tomorrow.

Job Overview

KEY ACCOUNTABILITIES

Team Leadership & Development

• Mentorship and Coaching: Guide and mentor team members, fostering their professional growth in Third-party Risk Management. Provide regular feedback and development opportunities.
• Performance Management: Support the performance review process and help address performance gaps within the team.
• Team Building & Collaboration: Cultivate a positive and collaborative team environment. Facilitate effective communication and knowledge sharing within the team and across other departments.
• Stakeholder Management: Build and maintain strong relationships with key stakeholders across the organization
• Building awareness amongst stakeholders about Third Party Risk Management
  
  

• Perform hands-on Third Party Security Risk Assessments on a regular basis to ensure a clear understanding of the processes and procedures
• Continuous Improvement: Regularly review the third-party security risk management processes to Identify and propose areas for improvement. This will ensure its effectiveness and alignment with business objectives.
• Stay abreast of industry best practices, emerging threats, and regulatory changes in the third-party risk management space.
• Innovation & Improvement: Continuously seek opportunities to improve and innovate the third-party security risk management program.
• Develop a strong understanding of the Supply Chain Center of Excellence. Build and maintain strategic partnerships in that space while gaining insights and influencing best practices.
  
  

• 7+ years of experience working in cyber security, cyber security technology, risk assessment and management
• Bachelor’s degree in Computer Science/Electronics/Electrical
  
  

• Proven experience in managing Third-Party Security Risks
• Extensive experience conducting risk assessments and developing remediation plans.
• Strong understanding of information security principles, best practices, and frameworks (e.g., NIST CSF, ISO 27001, SOC 2)
• Experience working with vendors and managing vendor relationships.
  
  

• Fosters environment of teamwork, positive relationships, accountability, and results within and across teams
• Strong learning agility and willing to learn new tools and technologies.
• Actively coaches group members in developing their skills
• Strong communication skills with ability to communicate complex issues to a diverse audience
• Self-starter with ability to drive an item from concept to full implementation independently
• Ability to conduct thorough analysis and recommend data driven actions
• The aptitude to innovate—to integrate new and better technologies and methods into our processes
• Highly organized and able to tackle issues efficiently.
  
  

• Demonstrated experience leading and managing a team of security professionals.
• ISO27001 lead auditor and other Cyber security certifications.