Job Title: Cyber Gap to Policy Operations Mgr.
Location: Kingston
Unilever is one of the world’s leading consumer goods companies with operations in over 190 countries and serving 3.4 billion consumers every day. Unilever delivers best in class performance with market making, unmissably superior brands which include Dove, Knorr, Domestos, Hellmann’s, Marmite and Lynx. Our strategy beings with a purpose that places our consumers at the heart of everything we do, “Brighten everyday life for all”.

SKILLS:

• Excellent written and verbal communication skills and able to be understood by both technical and non-technical personnel
• Ability to manage conflicting priorities and multiple tasks to meet key deadlines.
• Stakeholder management and interpersonal skills at both a technical and non-technical level.
• Ability to work in a collaborative environment.
• Ability to drive process teams to understand reporting situation, explores options and come to consensus on preferred solution.
• Strong presentation skills.
• Ability to work with internationally located stakeholders.
• Ability to work with emerging requirements to build prototypes/sketches and go through multiple iterations before agreeing on a workable solution.
• Data analysis skills to derive insights from relevant data sets.

EXPERIENCE:

The following experience is looked for in candidates that would be considered for the role:

• Operation and oversight of business process governance and/or design
• Experience in Cyber Security, especially cyber risk management is preferred but not essential.
• Experience dealing with stakeholders within a customer-focused environment.
• Understanding of global best practice standards (e.g. NIST, CIS, ISO), Information Security standards and controls, and the “three lines of defence” model for appropriate segregation of duties and risk transparency.

RECRUITMENT FRAUD

Cyber criminals advertise fake job adverts with prestigious employers as a way of stealing information or even defrauding individuals out of money. In the most sophisticated cases, they will set up fake websites, which have a similar address to companies like Unilever. They even conduct fake telephone interviews and then offer candidates a role with the proviso they pay a fee for background checks or to cover work visa costs. These types of attacks are becoming more common as more people are looking for employment in the economic climate.

ROLE PURPOSE:

This role will support the Senior Cyber Risk Manager. Using a risk led, and threat informed approach, this role will embed, operate and continuously improve the Gap-to-Policy (GtP) Governance, Process and Tooling for control gaps identified against Unilever’s Cyber policies and standards. This includes supporting the Cyber engagement function in the consistent execution of the process with their stakeholders. This role is responsible for ensuring the processes and governance are being operated in line with the defined approach and that Gaps are being appropriately logged, tracked, reported and governed in line with Unilever’s Risk Appetite.

ROLE SUMMARY:

The successful candidate will be accountable for the definition, operation and governance of a Cyber Gap-to-Policy framework across Unilever globally.
This role will ensure a risk-based approach is consistently applied for GtP execution across the organization, working with the Cyber Engagement function to ensure the process is operated in line with the framework defined by the GRAC team. To ensure an accurate and representative picture of Risk is maintained, they will ensure that full lifecycle management is being executed across all GtPs including the timely closure and reporting of expired and un-remediated GtPs is in place. The role will play a key part in helping Unilever effectively manage cyber risk across the global organisation.

RESPONSIBILITIES

1. Accountable for the operational oversight and governance of the Cyber Gap management framework
2. Responsible for the continuous improvement and optimisation of the Gap Management tooling, processes and workflows
3. Responsible for ensuring a Risk based approach is consistently taken to Gap Management
4. Responsible for maintaining the schedule of authority for GtP Approval
5. Accountable for ensuring the framework enforces full lifecycle management of GtPs
6. Responsible for assurance to ensure the Gap Mgt. framework is being implemented and operated consistently
7. Responsible for ensuring Risk surfaced through the exception handling process is fed through into the broader Cyber Risk Management framework.
8. Responsible for the aggregation and reporting of GtP Management

The following experience is looked for in candidates that would be considered for the role:

• Operation and oversight of business process governance and/or design
• Experience in Cyber Security, especially cyber risk management is preferred but not essential.
• Experience dealing with stakeholders within a customer-focused environment.
• Understanding of global best practice standards (e.g. NIST, CIS, ISO), Information Security standards and controls, and the “three lines of defence” model for appropriate segregation of duties and risk transparency