Cybersecurity Risk Management Specialist

The Cybersecurity RiskManagementSpecialist demonstratesa high levelof professionalism prioritizing the effective management of cybersecurity governance risk and compliance activities. This role will performand continuously improverisk managementassessments risk registration prioritized risk remediationapplication evaluations and will maintain the risk register in Bunges Governance Risk and Compliance automation to support the overall effectiveness of the BT alignment with Risk Management standards (e.g. NISTNIST CSF 2.0).

Essential Functions:

• Serve as liaison to coordinate Governance Risk and Compliance activities with key stakeholders to enable effective Cybersecurityrisk assessment riskregistration exceptionmanagement issue managementandalignmentwithapplicableinternal standardsandindustry best practices ( ISO COBIT PCI DSS)as needed.

• Define and identify control gaps provide recommendations for control process improvements and support control owners corrective action plans for remediation.

• Conduct risk assessments internal audits and investigations to identify and address potential compliance issues.

• Perform risk analysis and document findings including identification of control gaps risk ratings and recommended remediation actions aligned with organizational risk appetite.

• Effectively utilize process automation and reporting through Bunges Governance Risk and Compliance (GRC) automation Optro Infosec.

• Actively collaborate and support partner functions across Bunges Governance Risk and Compliance functions and with stakeholders throughout BT and Cybersecurity.

• Executes short to mid-term strategic initiatives driven by the department including collaboration with partner Governance Risk and Compliance functions.

• Recognized as an expert both internally & external to Bunge in the design performance and continuous improvement of governance risk and compliance related services and capabilities.

• Supports the evaluation prioritization registration monitoring and mitigation of risks and compliance and control deficiencies through collaboration withvarious functions within BT and across various Bunge business stakeholder groups (e.g. Internal Audit Legal Compliance Privacy).

• Leverage industry experience and knowledge of applicable best practices frameworks and guidance to define effective programsmonitorand strengthen internal controls risk-prioritize requisite remediation and to improve the overall posture of Bunges BT and Cybersecurity internal control environment.

• Solve highly complex multidimensional problems that require extensive investigation and advanced application of expertise to determine root cause to advise leadership on appropriate remediation methods and to mitigate or remediate internal controls to an acceptable level of residual risk across various functional areas of Business Technology and Cybersecurity including longstanding or unprecedented improvements without a historical precedent.

• Leverage both a measured reactive and a deliberateproactiveapproach to the assurance and continuous improvement of BT and Cybersecurity internal controls staying informed of emerging industry trends and techniques and changes in regulations to ensure continuous compliance.

• Effectively partner with colleagues within Bunges Governance Risk and Compliance function across BT and Cybersecurity and with various business stakeholders to ensure the adequacy and sufficiency of internal controls and supporting capabilities.

• Actively contribute to large global projects that include governance risk and compliance related capabilities and scope to ensure adherence to applicable policies assurance of control performance and the achievement of team and program goals.

• Educate BT leadership and functional areas about design adequacy operating effectiveness and techniques to ensure continuous compliance and improvement over their internal controls.

Qualifications:

• Bachelors degree in computer science or information systems risk management accounting finance or equivalent combination of education and work experience.

• 7 years of experience in compliance and controls assurance internal audit or a related field.

• Extensive knowledge ofIT/Cyber Risk Managementpracticesand frameworksrequired.

• Demonstrated experience in the monitoring and improvement of Information Technology general controls Cybersecurity controls and/or compliance programs required.

• Solid understanding of Governance Risk and Compliance methodologies and effective automation through GRC tooling.

• Nice to have: Experience with Optro InfoSec preferred(i.e. Cyber Risk Management CrossComplyand Third-Party Risk Management modules).

• Proven experience implementing Information Technology and Cybersecuritygovernance risk and compliance but not limited to: COBIT NIST CSF 2.0 ISO 27k NIST 800-30 NIST 800-37 NIST 800-161 NIST 800-53.

• Certifications such as CISA CRISC CGEIT or CISSP preferred.

• Ability to manage and executenumerousparallel activities in a fast-paced dynamic environment.

• Ability to build and maintain constructive and collaborative working relationships with a diverse community throughout the organization.

• Ability to effectively communicate and articulate risk management in both written and verbal manner to influence both technical and non-technical audiences at all levels of thecompanyincluding executives.

• Excellent analytical andproblem-solving skills.

• Actively shapes our company culture (e.g. supporting employee resource groups mentoring employees volunteering joining cross-functional projects).

• Champions our cultural norms (e.g. willing to have cameras when it matters helping onboard new team members building relationshipsetc.).

• Demonstrate a company ownership mindset thinking beyond boundaries of their own area and responsibilities.

• Ability to work with limited direct management to participate in governance risk and compliance related efforts improve practices coordinate cross functional activities and to successfully deliver strategic outcomes.

• Recognized as an expert inIT and cybersecurityrisk management.

• Can apply both a measured reactive and a deliberateproactiveapproach to the assurance and continuous improvement of BT and Cybersecurity internal controls staying informed of emerging industry trends risks and techniques and changes in regulations to ensure continuous compliance.

• Leverage industry experience and knowledge of applicable best practices(e.g. COBIT NIST CSF ISO 27k NIST 800-30 NIST 800-37 NIST 800-161 NIST 800-53) frameworksand guidance to establish effective governance strengthen internal controls risk-prioritize requisite remediation andimprove the overall posture of Bunges BT and Cybersecurity programs.

• Apply expertise to determine root cause to advise leadership on appropriate remediation methods and to mitigate or remediate internal controls to an acceptable level of residual risk across various functional areas of Business Technology and Cybersecurity including longstanding or unprecedented improvements without a historical precedent.

• Ability to work independently and as part of a cross functional team.