Senior Manager, BT Compliance & Controls Assurance

Sant Just Desvern, B, ES, 08960

Applications have closed

Location : Barcelona Hub 

City : Barcelona 

State : Balears (ES-PM) 

Country : Spain (ES) 

Requisition Number : 33960 

Bunge has an exciting opportunity available for a Senior Manager, Business Technology (BT) Compliance & Controls Assurance.  In this role you will be part of a global team working on challenging, meaningful projects impacting core business activities.  Since 1818, Bunge has been connecting farmers to consumers to deliver essential food, feed, and fuel to the world.  Looking to the future, our ambition is to continuously reinvent ourselves, leveraging data to be at the forefront of analytics, technology, and talent to accomplish our purpose in a better, faster, and simpler way.  Bunge is committed to operating and thriving in the digital world – creating world class agile teams where teammates are empowered and encouraged to collaborate and test and learn to succeed.
 
At Bunge, people do not just come here to work, they come here to grow – solving challenges that directly impact the world with a diverse team of thinkers and doers. Bunge offers a strong compensation and benefits package, generous paid time off program, flexible work arrangements, and opportunity to progress.  Our hybrid work environment provides a balance of in-office and remote work.
Most importantly, in all we do we live our values:
•    Act as One Team by fostering inclusion, collaboration, and respect
•    Drive for Excellence by being agile, innovative, and efficient
•    Do What's Right by acting safely, ethically, and sustainably

 

Overview:
Under the direction of the Director of BT Security and Risk Management, responsible for managing the planning, organization, and execution of BT internal control assurance and compliance activities. Implements and executes plans to evaluate and monitor the design of BT and Cybersecurity internal controls across the organization.

The Senior Manager, BT Compliance & Controls Assurance will manage the interactions between our Global Internal Audit and External Audit and Compliance (e.g., SOX) stakeholders on behalf of the Business Technology (BT) leadership team. This role will define, implement, and monitor the design adequacy and operating effectiveness of critical BT and Cybersecurity internal controls and related capabilities to ensure adherence to policy, applicable regulatory compliance, and to support the overall effectiveness of the BT organization.

 

Essential Functions:

  • Accountable for the performance of the BT Compliance and Controls Assurance team, including adherence to budget and the delivery of team objectives and goals. Build and operationalize a team of eventually 3-5 direct reports. 
  • Serve as a liaison to coordinate BT engagement with audits, compliance reviews, and other internal control-based activities to ensure proper engagement, effective root cause analysis, and the development of meaningful and sustainable management action plans. 
  • Define, monitor and strengthen internal controls, leveraging industry applicable frameworks (e.g., COBIT, NIST CSF (Cyber Security Framework) to mitigate and manage technology risks.
  • Design and implement periodic internal control testing procedures and maturity assessments to evaluate the operating effectiveness of BT and Cybersecurity internal controls and related capabilities.
  • Define and identify control gaps, provide recommendations for control process improvements, and oversee corrective action plans for remediation.
  • Mentor and manage the activities of other BT Compliance and Controls Assurance team members, including the effective utilization of process automation and reporting through Bunge’s Governance, Risk and Compliance (GRC) automation.
  • Actively collaborate and support partner functions across Bunge’s Governance, Risk and Compliance functions, and with stakeholders throughout BT and Cybersecurity.
  • Develops initiatives, matures programs, and participates in the establishment of their team’s short to mid-term strategic planning within the department, including collaboration with partner Governance, Risk and Compliance functions.
  • Recognized as an expert, both internally & external to Bunge, in internal controls, effective demonstration of compliance, and applicable remediation and mitigation techniques within the organization.
  • Ensures BT compliance with legal and regulatory requirements and adherence to internal control objectives, minimizing BT and Cybersecurity risk & avoiding potential penalties to the organization.
  • Supports the remediation of compliance and control deficiencies through collaboration with various functions within BT and across various Bunge business stakeholder groups (e.g., Internal Audit, Legal, Compliance, Privacy).
  • Development of solutions for more robust controls in support of risk and regulatory compliance-related initiatives.
  • Leverage industry experience and knowledge of applicable best practices, frameworks, and guidance to define effective programs, monitor and strengthen internal controls, risk-prioritize requisite remediation, and to improve the overall posture of Bunge’s BT and Cybersecurity internal control environment.
  • Solve highly complex, multidimensional problems that require extensive investigation and advanced application of expertise to determine root cause, to advise leadership on appropriate remediation methods, and to mitigate or remediate internal controls to an acceptable level of residual risk, across various functional areas of Business Technology and Cybersecurity, including longstanding or unprecedented improvements without a historical precedent.
  • Leverage both a measured reactive and a deliberate proactive approach to the assurance and continuous improvement of BT and Cybersecurity internal controls, staying informed of emerging industry trends and techniques and changes in regulations to ensure continuous compliance.
  • Effectively partner with colleagues within Bunge’s Governance, Risk and Compliance function, across BT and Cybersecurity, and with various business stakeholders to ensure the adequacy and sufficiency of internal controls and supporting capabilities.
  • Lead, and participate in, large global projects that include internal control, regulatory compliance, and related capabilities scope to ensure adherence to applicable policies, assurance of control performance, and the achievement of team and program goals. 
  • Ability to work with limited direct management to lead efforts, improve practices, coordinate cross functional activities and to successfully deliver strategic outcomes.
  • Demonstrate an ability to balance the appropriate performance of a control and proper mitigation of risk with the realization of critical business capabilities, working within time, technology, capacity, and budget constraints.
  • Accountable for the performance of the BT Compliance and Controls Assurance team, including adherence to budget, and the delivery of team objectives and goals. Build and operationalize a team of eventually 3-5 direct reports.
  • Mentor and manage the activities of other BT Compliance and Controls Assurance team members, including the effective utilization of process automation and reporting through Bunge’s Governance, Risk and Compliance (GRC) automation.
  • Support the overall development plans and capabilities of the Governance, Risk and Compliance function.
  • Serve as a liaison to coordinate BT engagement with audits, compliance reviews, and other internal control-based activities to ensure proper engagement, effective root cause analysis, and the development of meaningful and sustainable management action plans.
  • Supports the remediation of compliance and control deficiencies through collaboration with various functions within BT and across various Bunge business stakeholder groups (e.g., Internal Audit, Legal, Compliance, Privacy).
  • Educate BT leadership and functional areas about design adequacy, operating effectiveness, and techniques to ensure continuous compliance and improvement.


Minimum Requirements:

  • Bachelor's degree in computer science or information systems, risk management, accounting, finance, or equivalent combination of education and work experience.
  • 11 plus years of experience in Information Technology, Internal Audit, Internal Controls, Risk Management, or related discipline (or equivalent combination), 
  • 7 plus years of experience in managerial/leadership roles in similar areas of experience.
  • Extensive knowledge of Sarbanes-Oxley compliance required. 
  • Recognized as an expert in internal controls, effective demonstration of compliance, and applicable remediation and mitigation techniques within the organization.
  • Can apply both a measured reactive and a deliberate proactive approach to the assurance and continuous improvement of BT and Cybersecurity internal controls, staying informed of emerging industry trends and techniques and changes in regulations to ensure continuous compliance.
  • Leverage industry experience and knowledge of applicable best practices (e.g., COBIT, NIST CSF, ISO 27k) frameworks, and guidance to define effective programs, strengthen internal controls, risk-prioritize requisite remediation, and to improve the overall posture of Bunge’s BT and Cybersecurity internal control environment.
  • Apply expertise to determine root cause, to advise leadership on appropriate remediation methods, and to mitigate or remediate internal controls to an acceptable level of residual risk, across various functional areas of Business Technology and Cybersecurity, including longstanding or unprecedented improvements without a historical precedent.
  • Knowledge of Payment Card Industry (PCI) compliance, GDPR (General Data Protection Regulation) compliance or other applicable compliance programs preferred.
  • Demonstrated experience in the design, implementation, monitoring and improvement of Information Technology general controls, Cybersecurity controls, and/or compliance programs required.
  • Solid understanding of Governance, Risk and Compliance methodologies and effective automation through GRC tooling. Experience with Archer GRC preferred.
  • Proven experience implementing Information Technology and Cybersecurity frameworks required.  Possible examples include, but are not limited to: COBIT, NIST CSF, ISO 27k.
  • Certifications such as CIA, CISA, CGEIT, CISSP preferred. 
  • Ability to manage and execute numerous parallel activities in a fast-paced, dynamic environment.
  • Ability to build and maintain constructive working relationships with a diverse community throughout the organization.
  • Ability to effectively communicate in both written and verbal manner to influence both technical and non-technical audiences at all levels of the company including executives.
  • Excellent analytical and problem-solving skills
  • Project management skills preferred
  • Actively shapes our company culture (e.g., supporting employee resource groups, mentoring employees, volunteering, joining cross-functional projects)
  • Champions our cultural norms (e.g., willing to have cameras when it matters, helping onboard new team members, building relationships, etc.)
  • Demonstrates a company ownership mindset, thinking beyond boundaries of their own area

Bunge (NYSE: BG) is a world leader in sourcing, processing and supplying oilseed and grain products and ingredients. Founded in 1818, Bunge’s expansive network feeds and fuels a growing world, creating sustainable products and opportunities for more than 70,000 farmers and the consumers they serve across the globe. The company is headquartered in St. Louis, Missouri and has 25,000 employees worldwide who stand behind more than 350 port terminals, oilseed processing plants, grain facilities, and food and ingredient production and packaging facilities around the world.

 

Bunge is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, transgender status, national origin, citizenship, age, disability or military or veteran status, or any other legally protected status.  Bunge is an Equal Opportunity Employer. Minorities/Women/Veterans/Disabled

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Tags: Agile Analytics Audits Automation CIA CISA CISSP COBIT Compliance Computer Science Finance GDPR Governance ISO 27000 Monitoring NIST Privacy Risk management SOX

Perks/benefits: Flex hours Flex vacation Team events

Region: Europe
Country: Spain
Job stats:  6  1  0

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.