Sr Analyst BT Compliance and Controls Assurance

Business Title Sr. Analyst, Governance, Risk and Compliance Global Job Title Sr Anl BT Sec&Infrastructure Global Function Business Technology Global Department BT Security& Infrastructure Organizational Level Reporting to Size of team reporting in and type Substantial changes Role Purpose Statement The Sr. Analyst, Governance, Risk and Compliance demonstrates a high level of professionalism, prioritizing the effective management of cybersecurity governance, risk, and compliance activities. This role will perform, and continuously improve the governance of policies and standards and their integration into processes and controls designed to deliver critical BT services and aligned with applicable industry best practices and standards (e.g., NIST, ISO, COBIT, PCI DSS). This role will perform, and continuously improve Risk Management assessments, risk registration, prioritized risk remediation, third party and application evaluations, and will maintain the risk register in Bunge s Governance, Risk and Compliance automation to support the overall effectiveness of the BT organization. Main Accountabilities Actively engage in Governance, Risk, and Compliance activities with key stakeholders to enable effective Cybersecurity policies and standards, exceptions management, enablement and training, and the alignment against applicable industry best practices (e.g. NIST, ISO, COBIT, PCI DSS) as needed. Facilitate effective audits, compliance reviews, and other internal control-based activities for the Business Technology (BT) organization. Ensure proper engagement, effective root cause analysis, and the development of meaningful and sustainable management action plans.

Implement and perform periodic internal control testing procedures and maturity assessments to evaluate the operating effectiveness of BT and Cybersecurity internal controls and related capabilities.

Define and identify control gaps, provide recommendations for control process improvements, and support control owners corrective action plans for remediation.

Implement and perform compliance and controls assurance processes and procedures to mitigate risks and ensure adherence to regulatory requirements.

Conduct risk assessments, internal audits, and investigations to identify and address potential compliance issues.

Develop content for comprehensive cybersecurity awareness programs and initiatives to educate employees and stakeholders about cybersecurity risks and best practices.

Effectively utilize process automation and reporting through Bunge s Governance, Risk and Compliance (GRC) automation.

Actively collaborate and support partner functions across Bunge s Governance, Risk and Compliance functions, and with stakeholders throughout BT and Cybersecurity. Knowledge and Skills Behavior Improve Bunges outcomes by making data-driven decisions, keeping the customer at the forefront of all they do, and proactively gaining insight into the global strategy.
Collaborate, effectively communicate with others and take initiative to continually develop themselves.
Pursue opportunities to solve problems and take action while maintaining the ability to manage work, even in times of challenge or change. Technical Recognized as an expert in internal controls, effective demonstration of compliance, and applicable remediation and mitigation techniques within the organization.

Leverage a deliberate proactive approach to the assurance and continuous improvement of BT and Cybersecurity internal controls, staying informed of emerging industry trends and techniques and changes in regulations to ensure continuous compliance.

Leverage industry experience and knowledge of applicable best practices (e.g., COBIT, NIST CSF, ISO 27k) frameworks, and guidance to establish effective governance, strengthen internal controls, risk-prioritize requisite remediation, and to improve the overall posture of Bunge s BT and Cybersecurity programs.

Apply expertise to determine root cause, to advise key stakeholders on appropriate remediation methods, and to mitigate or remediate internal controls to an acceptable level of residual risk, across various functional areas of Business Technology and Cybersecurity, including the remediation of longstanding risks and deficiencies.

Ability to work independently and as part of a cross functional team. Education & Experience Bachelors degree in computer science or information systems, risk management, accounting, finance, or equivalent combination of education and work experience.

5+ years of experience in compliance and controls assurance, internal audit, or a related field.

Prior experience in Sarbanes-Oxley compliance required.

Knowledge of Payment Card Industry (PCI) compliance, GDPR (General Data Protection Regulation) compliance or other applicable compliance programs preferred.

Demonstrated experience in the monitoring and improvement of Information Technology general controls, Cybersecurity controls, and/or compliance programs required.

Solid understanding of Governance, Risk and Compliance methodologies and effective automation through GRC tooling. Experience with Archer GRC preferred.

Proven experience working with Information Technology and Cybersecurity frameworks required. Possible examples include, but not limited to: COBIT, NIST CSF, ISO 27k.

Certifications such as CIA, CISA, CGEIT, CISSP preferred.

Ability to manage and execute parallel activities in a fast-paced, dynamic environment.

Ability to build and maintain constructive and collaborative working relationships with a diverse community throughout the organization.

Ability to effectively communicate in both written and verbal manner to influence both technical and non-technical audiences at all levels of the company including executives.

Excellent analytical and problem-solving skills

Demonstrates a company ownership mindset, thinking beyond boundaries of their own area.

Prior to applying for a new position, employees should discuss the intent with their supervisor to facilitate development discussions and keep the process transparent throughout. Please refer to the Talent Acquisition Policy or contact your Regional Talent Acquisition team for specific questions.

Job Segment: Cyber Security, Recruiting, Risk Management, Compliance, Internal Audit, Security, Human Resources, Finance, Legal