We are looking for a Cyber and Digital Security Senior Specialist to be part of our Infrastructure Security and Data Protection team. 

 
Position Snapshot 

• Location: Barcelona 

• Type of Contract: Permanent 

• Stream: IT Security & Compliance 

• Type of work: Hybrid 

• Work Language: Fluent Business English 

The role 

In this position, you are responsible for establishing and maintaining security products, platforms and solutions designed to mitigate IT risks across Nestlé Group to ensure that information assets are adequately protected. The Cyber and Digital Security Specialist will proactively work with IT and business units to implement practices that meet defined policies and standards for information security. Acting as a security business partner for the IT Product Groups, you will represent IT Security in various core team meetings. The Cyber and Digital Security Senior Specialist continuously researches and stays on top of emerging security threats, technologies and trends. 

What you’ll do 

• Develop, maintain and publish up-to-date security policies, standards and guidelines, and oversee training and dissemination of security policies and practices around Database Security as well as other security practices.

• Provide strategic risk guidance for IT projects and product management, including the evaluation and recommendation of technical controls to ensure adherence to security requirements. 

• Ensure that security programs are in compliance with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.

• Work closely with Enterprise Architects, other functional area Architects and other Security Specialists to ensure adequate security solutions are in place throughout all IT products and platforms to mitigate identified risks sufficiently and to meet business objectives. 

• Serve as a security expert in infrastructure design and deployment, database design, network and/or platform (operating system) efforts, helping product teams comply with enterprise and IT security policies, industry regulations and best practices. 

We offer you  

We offer more than just a job. We put people first and inspire you to become the best version of yourself. 

• Great benefits including competitive salary and a comprehensive social benefits package. We have one of the most competitive pension plans on the market, as well as flexible remuneration with tax advantages: health insurance, restaurant card, mobility plan, etc. 

• Personal and professional growth through ongoing training and constant career opportunities reflecting our conviction that people are our most important asset. 

• Hybrid working environment with flexible working scheme. Our state-of-the-art campus is dog friendly and equipped with a medical center, canteen and areas to co-create network and chill! 

• Recreation activities such as yoga, Zumba, etc. and a wide range of volunteering activities. 

Minimum qualifications: 

• Degree in business administration or a technology-related field, or equivalent work- or education-related experience. 

• 8+ years of experience in a combination of risk management, information security and IT jobs.  

• Experience in complex enterprise environments and current technology areas like cloud and mobility. 

• Experience on databases security (SQL, Oracle, NoSQL, HANA DB etc).  

• Preference to have worked in a global environment and with virtual teams. 

• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials, is preferred. 

• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences in English. 

• Poise and ability to act calmly and competently in high-pressure, high-stress situations. 

• Must be a critical thinker with strong problem-solving skills. 

• High level of personal integrity, and the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity. 

Bonus Points If You:

• Knowledge of common information security management frameworks, such as ISO 27001, IS/ITIL, COBIS/IT and NIST.

About the IT Hub  

At Nestlé IT, we are a diverse, global team of IT professionals in the biggest health, nutrition and wellness company of the world. We strive to create an environment where people are valued for who they are. We innovate every day through future ready technologies to create opportunities for Nestlé to delight consumers, customers and employees alike.  We collaborate with partners around the world to deliver tangible value at global scale. We continuously work to develop our people to be future ready. 

About Nestlé  

We are Nestlé, the largest food and beverage company in the world, with a presence in more than 185 countries. With net sales of CHF 94.4 billion in 2022, the company has over 291,000 employees and 418 factories in 85 countries. Our values are based on respect: respect for ourselves, respect for others, respect for diversity, and respect for our future. Nestlé is dedicated to offering high-quality food and beverage products and services that contribute to the nutrition, health, and well-being of people, pets, and the planet. Additionally, it is committed to being a leading company in sustainability and achieving net zero greenhouse gas emissions by 2050. Want to learn more? Visit us at: www.nestle.com 

We encourage the diversity of applicants across gender, age, ethnicity, nationality, sexual orientation, social background, religion or belief and disability. 

Step outside your comfort zone; share your ideas, way of thinking and working to make a difference to the world, every single day. You own a piece of the action – make it count.  

Join Nestlé’s IT Hub #beaforceforgood 

How we will proceed: 
You send us your CV → We contact relevant applicants → Interviews → Feedback →   Job Offer communication to the Finalist → First working day