In this role, you will lead the Governance, Risk, and Controls (GRC) function within the Information Security Team. You will develop and maintain our global organization's information security policies, assess compliance (internal and external), and deliver security awareness programs across the entire company. You will also assess, communicate, and manage information security risks in a structured framework.Your responsibilities:<ul><li>Manage the information protection policy process, including ongoing process improvements</li><li>Identify the need for new or updated policies, and draft content for same</li><li>Advise and consult with internal and external entities regarding information security policy issues.</li><li>Actively manage and participate in audit readiness and audit conduct activities, including internal self-assessment, and continually improve these processes</li><li>Escalate and expedite potential compliance and audit issues</li><li>Liaison with internal and external auditors</li><li>Liaison with related functions such as Physical Security, Legal, HR, and IT</li><li>Manage information security reviews for third-party providers</li><li>Regularly measure compliance with internal and external requirements and frameworks</li><li>Build and maintain an information security risk management framework</li><li>Proactively identify risks and propose remediation activities and risk treatments</li><li>Measure and report on all information security risk, policy, compliance, and audit items</li><li>Build and maintain the overall Information Security Scorecard</li></ul>You're a great fit, if you:<ul><li>Have 5+ years of relevant experience in a similar position within Information Security, with a focus on governance, risk management, and compliance</li><li>Demonstrate experience in developing and implementing IT security policies, procedures, and standards</li><li>Have a proven track record of conducting risk assessments and managing IT security risks</li><li>Possess relevant security certifications such as CISSP, CISM, or CISA</li><li>Are proficient in designing and implementing security controls and measures</li><li>Have experience with security frameworks and best practices</li><li>Possess strong knowledge of global regulatory requirements and industry standards (e.g., GDPR, ISO 27001, NIST)</li><li>Demonstrate the ability to collaborate effectively with various departments and stakeholders, including external providers</li><li>Are familiar with OneTrust (desired), MS Office</li><li>Hold bachelor's degree or equivalent work experience</li><li>Speak fluent English</li></ul>We offer:<ul><li>A chance to shape GRC policies within a global organization </li><li>Being part of a fast-growing, dynamic company, one of leading global packaging manufacturers </li><li>Fast-paced, challenging environment with great professional growth opportunities </li><li>Collaborative culture with strong quality and innovation focus </li><li>Flexible hybrid work arrangement (2 days/week in the office preferred)</li></ul>If you are a current CANPACK employee, please apply through your <a href="http://workday.canpack.com">Workday account</a>.CANPACK Group is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or any other characteristic protected by law or not related to job requirements, unless such distinction is required by law.

<div class="org-about-module-wrapper org-about-module__card-spacing" tabindex="-1" data-artdeco-is-focused="true">
<div>
<div class="org-about-module__description">
<div id="ember58" class="ember-view organization-about-module__content-consistant-cards-description">We&rsquo;re CANPACK Group &ndash; 8,000 people around the world, with a common goal to push the boundaries of packaging and help our customers dream and deliver on a global scale. Our company began in Poland over 30 years ago, and since then we&rsquo;ve grown into a leading global manufacturer of beverage packaging. Every day, we produce millions of beverage cans, food tins, glass bottles and metal closures at our production sites located on five continents. We create impactful, sustainable solutions that do more &ndash; for brands, for businesses, for people and the planet. We achieve this through empowering every employee to make their mark by sharing ideas and solving problems together. Join us and be part of a collaborative culture that cares about its employees and respects the world around it. Join us and help us Create That Feeling. </div>
</div>
</div>
</div>

Global IT Security Manager - GRC

In this role, you will lead the Governance, Risk, and Controls (GRC) function within the Information Security Team. You will develop and maintain our global organization's information security policies, assess compliance (internal and external), and deliver security awareness programs across the entire company. You will also assess, communicate, and manage information security risks in a structured framework.Your responsibilities:<ul><li>Manage the information protection policy process, including ongoing process improvements</li><li>Identify the need for new or updated policies, and draft content for same</li><li>Advise and consult with internal and external entities regarding information security policy issues.</li><li>Actively manage and participate in audit readiness and audit conduct activities, including internal self-assessment, and continually improve these processes</li><li>Escalate and expedite potential compliance and audit issues</li><li>Liaison with internal and external auditors</li><li>Liaison with related functions such as Physical Security, Legal, HR, and IT</li><li>Manage information security reviews for third-party providers</li><li>Regularly measure compliance with internal and external requirements and frameworks</li><li>Build and maintain an information security risk management framework</li><li>Proactively identify risks and propose remediation activities and risk treatments</li><li>Measure and report on all information security risk, policy, compliance, and audit items</li><li>Build and maintain the overall Information Security Scorecard</li></ul>You're a great fit, if you:<ul><li>Have 5+ years of relevant experience in a similar position within Information Security, with a focus on governance, risk management, and compliance</li><li>Demonstrate experience in developing and implementing IT security policies, procedures, and standards</li><li>Have a proven track record of conducting risk assessments and managing IT security risks</li><li>Possess relevant security certifications such as CISSP, CISM, or CISA</li><li>Are proficient in designing and implementing security controls and measures</li><li>Have experience with security frameworks and best practices</li><li>Possess strong knowledge of global regulatory requirements and industry standards (e.g., GDPR, ISO 27001, NIST)</li><li>Demonstrate the ability to collaborate effectively with various departments and stakeholders, including external providers</li><li>Are familiar with OneTrust (desired), MS Office</li><li>Hold bachelor's degree or equivalent work experience</li><li>Speak fluent English</li></ul>We offer:<ul><li>A chance to shape GRC policies within a global organization&nbsp;</li><li>Being part of a fast-growing, dynamic company, one of leading global packaging manufacturers&nbsp;</li><li>Fast-paced, challenging environment with great professional growth opportunities&nbsp;</li><li>Collaborative culture with strong quality and innovation focus&nbsp;</li><li>Flexible hybrid work arrangement (2 days/week in the office preferred)</li></ul>If you are a current CANPACK employee, please apply through your <a href="http://workday.canpack.com">Workday account</a>.CANPACK Group is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or any other characteristic protected by law or not related to job requirements, unless such distinction is required by law.

Global IT Security Manager - GRC

About the Job

About the Company

CANPACK Recycling

Similar Jobs

Senior Information Security Analyst-Regional Security Support

Senior Information Security Analyst-Regional Security Support

Senior Global IT Security Specialist

Senior Global IT Security Specialist

IT Governance Officer

IT Governance Officer

Senior IT Security Officer

Senior IT Security Officer

Senior IT Security Officer

Senior IT Security Officer

Senior IT Security Officer

Senior IT Security Officer

Digital Solutions Governance Manager

Digital Solutions Governance Manager

Head of Information Security (f/m/d)

Head of Information Security (f/m/d)

IT Security Expert

IT Security Expert

IT Solutions Program Manager (ALM, Release Management)

IT Solutions Program Manager (ALM, Release Management)