Sr. Data Analyst – Cyber Security, Enterprise Vulnerability Management | Digital & Technology

About General Mills

We make food the world loves: 100 brands. In 100 countries. Across six continents. With iconic brands like Cheerios, Pillsbury, Betty Crocker, Nature Valley, and Häagen-Dazs, we’ve been serving up food the world loves for 155 years (and counting). Each of our brands has a unique story to tell.

How we make our food is as important as the food we make. Our values are baked into our legacy and continue to accelerate

us into the future as an innovative force for good. General Mills was founded in 1866 when Cadwallader Washburn boldly bought the largest flour mill west of the Mississippi. That pioneering spirit lives on today through our leadership team who upholds a vision of relentless innovation while being a force for good. For more details check out http://www.generalmills.com

General Mills India Center (GIC) is our global capability center in Mumbai that works as an extension of our global organization, delivering business value, service excellence, and growth, while standing for good for our planet and people.

With our team of 1800+ professionals, we deliver superior value across the areas of Supply chain (SC), Digital & Technology (D&T) Innovation, Technology & Quality (ITQ), Consumer and Market Intelligence (CMI), Sales Strategy & Intelligence (SSI), Global Shared Services (GSS), Finance Shared Services (FSS) and Human Resources Shared Services (HRSS). For more details, check out https://www.generalmills.co.in

We advocate for advancing equity and inclusion to create more equitable workplaces and a better tomorrow.

Job Overview

Function Overview

Digital and Technology is the largest team in GIC, which focuses on understanding the latest and innovative trends in technology and leading the adoption of cutting-edge technologies at General Mills. The team closely collaborates with global business teams to understand business models and assess where technology can be leveraged to bring efficiency and disruption. Be it AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain or Enterprise Architecture, GIC Digital and Technology has something for every technology enthusiast who wants to work here. Our MillsWorks initiative is where we bring the agile@scale delivery model to life. Here, business and technology teams work cohesively in pods as ONE team, driven by a singular mission and focused on delivering value for the Company. Our employees, who work on large technology projects of strategic importance, are the Digital Transformation change agents.

Our service partnerships and employee engagement are centered on advancing equity and strengthening communities. We believe in an inclusive culture and trust in the power of people who have a passion for learning and growing with technology. We believe in “Work with Heart”. Work with Heart is focused on results, not face time. If you are passionate about the latest in technology and want to make an impact on the digital transformation journey of a Fortune 500 company, we're waiting for you. For more details about the Function, please visit this Link.

Purpose of the role

This role will provide input to the EVM strategic direction and have a focused responsibility for one or more EVM tools. This role is responsible for implementing and managing enterprise vulnerability management processes to reduce technical risks, which include identifying and evaluating vulnerabilities and remediation activities. Should be able to provide inputs and work on key development strategies for EVM. Having Cyber Security knowledge and understanding of various areas of Vulnerability management, like Penetration tests, DAST, SAST, and Infrastructure Vulnerability management, is a must. An understanding of Networks and network security would be a plus point.

Key Accountabilities

90% of Time: Functional Responsibilities:

• Areas of responsibility include, but are not limited to, advancing the Penetration testing program and bringing enhancements to it. Working on various areas of Vulnerability Management, including but not limited to DAST, SAST, and Cloud.
• Should be able to manage and collaborate for internal and external pen testing procedures end-to-end.
• Should be able to provide inputs and work on key development strategies for the EVM processes
• Research, consultation, and guidance of business partners on the most effective approach for GMI to address critical vulnerabilities identified
• Building awareness amongst stakeholders about Vulnerability management and translating technical discussions for Senior Leadership
• Responsible for maintaining and enhancing configuration and procedural documentation of the current and future Vulnerability Management processes, where required
• Leverage appropriate learning opportunities for technical and professional growth
• Knowledge of ongoing market trends and technologies, and ensuring the team is well updated, or transitions are made where required
  
  

10% of Time: Personal and Team Development Responsibilities:

• Networks with stakeholders and builds strong connections in Cyber Security
• Share knowledge and trends within the Cyber Security team to improve General Mills' cyber security awareness.
  
  

Minumum Qualifications

• Bachelor’s degree from an accredited university
• 5+ years of related experience
• Comfort with the shift time of: 11.30 am to 8.30 pm
  
  

Specific Job Experience Or Skills Needed

• Practical knowledge of IT Security-related technologies, procedures, and best practices
• Process-based understanding of how Penetration tests work
• Should be able to mentor and train the team where required for various processes
• Should be able to propose VM solutions, prepare presentations, and coordinate vendor demonstrations
• Should be able to work and drive pen testing projects and identify/collaborate requirements for the same.
• Should be able to present the strategies and process developments in EVM to the business
• Prior experience in Information Technology
• Understanding of CI/CD application development processes
• Experience doing risk assessments
• Strong knowledge in information security standards and frameworks such as NIST 800-53
• Ability to prioritize and complete multiple tasks on tight deadlines.
  
  

Competencies/Behaviors Required For The Job

• Fosters an environment of teamwork, positive relationships, accountability, and results within and across teams
• Strong learning agility and willing to learn new tools and technologies.
• Actively coaches group members in developing their skills
• Strong communication skills with the ability to communicate complex issues to a diverse audience
• Self-starter with the ability to drive an item from concept to full implementation independently
• Ability to conduct thorough analysis and recommend data-driven actions
• The aptitude to innovate—to integrate new and better technologies and methods into our processes
• Highly organized and able to tackle issues efficiently.
  
  

Company Overview

We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one other and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.