The Digital and Technology team at General Mills stands as the largest and foremost unit, dedicated to exploring the latest trends and innovations in technology while leading the adoption of cutting-edge technologies across the organization. Collaborating closely with global business teams, the focus is on understanding business models and identifying opportunities to leverage technology for increased efficiency and disruption. The teams expertise spans a wide range of areas, including AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain, SAP S4 HANA and Enterprise Architecture. The MillsWorks initiative embodies an agile@scale delivery model, where business and technology teams operate cohesively in pods with a unified mission to deliver value for the company. Employees working on significant technology projects are recognized as Digital Transformation change agents.
The team places a strong emphasis on service partnerships and employee engagement with a commitment to advancing equity and supporting communities. In fostering an inclusive culture, the team values individuals passionate about learning and growing with technology, exemplified by the "Work with Heart" philosophy, emphasizing results over facetime. Those intrigued by the prospect of contributing to the digital transformation journey of a Fortune 500 company are encouraged to explore more details about the function through the following Link
Purpose of the role
This role is responsible for supporting the execution of how General Mills appropriately protects personal data from cyber-attack, including how this data is internally secured, and will ensure associated privacy are being implemented accordingly. This will be accomplished by partnering across D&T, Law, Data Governance, and key business partners to identify risks to personal data and working across those teams to provide and implement mitigation recommendations, in accordance with General Mills overall Data Protection and Privacy Management strategy.
KEY ACCOUNTABILITIES
45% - Data Protection Execution:
Regularly meet with relevant stakeholders to provide tactical direction in the development and execution of data management plans.
Communicate plans to protect personal data to peers across Data Governance, Digital Core, Solution Development, Data Management Plan owners, DD&A, and Cyber Security
Conduct regular assessments of compliance for GMI digital capabilities to assess privacy risk and propose mitigating efforts.
Support the creation of personal data inventory to appropriately record data flows within GMI systems, cloud environment, and third-party vendors.
Act as an internal consultant to business stakeholders to interpret issues related to data privacy regulatory requirements.
Support technical support for privacy related technologies.
45% - Privacy Management:
Apply an established universal level of privacy governance across all personal data types, and ensure this governance is both reasonable and actionable.
Stay up-to-date on emerging personal information - oriented privacy laws, as well as changes to existing privacy laws, and be prepared to provide an impact assessment of those changes to relevant stakeholders
Partner with the Data Privacy team on the implementation of privacy directives across our technology landscape, as it pertains to personal information.
10% - Partnership & Benchmarking:
Maintain existing and develop new contacts within the candidate s professional network of cyber security/Privacy peers and leading security consultants/vendors.
Continuously develops knowledge of evolving best practices and trends through peer benchmarking, industry events/associations, and educational opportunities.
Share knowledge and trends within the Cyber Security team to improve General Mills cyber security awareness.
MINIMUM QUALIFICATIONS
- Education Full time graduation from an accredited university (Mandatory- Note: This is the minimum education criteria which cannot be altered)
- Minimum 5 years of related experience required.
Special Job Experience or Skills needed:
- Knowledge of privacy laws and the relationship they have with cyber security
- Technical Expertise supporting Privacy related technologies (OneTrust)
- Successful track record of positively influencing stakeholders.
- Strong communication and presentation skills.
- Experience establishing strong working relationships with business partners.
- A working knowledge of cyber security, cyber security technology, risk assessment, privacy compliance and management.
- Successful track record of positively influencing stakeholders.
- Strong communication and presentation skills.
- Experience establishing strong working relationships with business partners.
- A working knowledge of cyber security, cyber security technology, risk assessment, privacy compliance, and management.
- Demonstrated ability to work across organizational boundaries, and influence others.
- Ability to work on an agile product team; define and manage internal projects and milestones; and demonstrate leadership skills.
- Strong interpersonal, verbal, presentation, and written communication skills.
- Ability to effectively present to a wide range of audiences.
- Comfortable shifting priorities and simultaneously engaging in and managing multiple projects.
- Ability to make decisions and solve problems especially where there is ambiguity.
- Ability to influence through relationship building and executive presence.
- Ability to work both independently and collaboratively in a team environment.
- Discretion, integrity, and independent sound judgment in both designing and implementing processes.
- Strong analytic skills with a penchant for metrics.
PREFERRED QUALIFICATIONS
- Certified Information Systems Security Professional (CISSP), Certified Information Privacy Professional (CIPP) by the International Association of Privacy Professionals (IAPP), and/or public sector equivalent.
