Constellation Brands | Hiring | Analyst | Victor, NY | United States | BigDataKB.com | 12 Oct 2022

Job Description

Company Summary

We’re the producers, creators and marketers of beer, wine and spirits brands that people love. At Constellation Brands, we’re driven to push boundaries and think beyond today to deliver products and experiences that resonate now, tomorrow, and well into the future. Because of this approach, we’re the fastest-growing large CPG company in the U.S. at retail, with operations in the U.S., Mexico, New Zealand, and Italy. Our premium portfolio of iconic brands like Corona Extra, Modelo Especial, Kim Crawford, Robert Mondavi, Meiomi, The Prisoner, SVEDKA Vodka, High West Whiskey, and more drive industry-leading growth for us today. But we’re just getting started. Our ability to stay on the forefront of consumer trends has fueled our success since our founding in 1945 and will guide us in creating the next generation of products and experiences Worth Reaching For.

Position Summary

The Senior Analyst of Governance and Compliance is responsible for monitoring and identifying information security and compliance risks to company information as well internal and external systems. This individual will coordinate in audit and compliance initiatives related to corporate policies and standards that are aligned with business, IT and regulatory requirements. This role will deliver the management and creation of key compliances initiatives such as SOX, Information Security controls, and internal processes. The incumbent will proactively collaborate with various constituents across business units, information technology, information security, internal audit and other departments and organizations to maintain a compliant control environment. This role requires a high level of collaboration and cross team partnership. The individual will perform internal security compliance monitoring, exception handling, and remediation activities.

Responsibilities

• Participates in key projects as a security and compliance subject matter expert to ensure alignment between Information Security, core business lines, and Information Technology
• Partner in the development of IT and information security policies, standards and controls that align with industry standards and leading practices.
• Participate in tracking and validating control exceptions and remediation efforts, including timely closure.
• Review third party compliance reports (e.g., SOC 1, SOC 2, ISO, etc.) and other certifications and regulations and monitor, report and escalate on identified control deficiencies
• Align with the Information Technology and Information Security teams preparing for audits and assessments, policy management, process owner facilitation and documentation retention.
• Perform compliance reviews, assessments, monitoring activities and control testing.
• Drive the design and implementation of remediation plans that will effectively remediate issues in the short-term as well as strategically for the long-term.
• Perform testing and documentation of IT automated controls.
• Collaborates with internal and external parties, including audit teams, to provide requests, follow-up on audit issues and assist with impact analysis

Minimum Qualifications

• BS in Cybersecurity, Internal Audit, Management of Information Systems, Information Security/Assurance, Computer Science or equivalent experience
• Strong subject matter credibility – Must have knowledge and ability to take a practical/business-relevant approach to security and compliance, resulting in a practical yet compliant security program.
• Experience with the development, maintenance and reporting of related information security and compliance metrics.
• Must collaborate and communicate well with various levels of the organization who have various levels of technical knowledge
• Ambitious, innovative self-starter with curiosity and passion to produce high-quality deliverables
• High energy level, ability to manage multiple and competing priorities in a dynamic, fast-paced, innovative work environment
• Experience in control automation and processes using industry tools. (Power BI, Tableau)

Preferred Qualifications

• Minimum of 3-5 years of Information Security, IT Audit or related work experience with a broad range of exposure to systems analysis, application development, database design and administration.
• Experience with the development, implementation, maintenance and enforcement of corporate policies, standards, and controls
• Knowledge and experience with CIS, NIST Cybersecurity framework, Sarbanes Oxley (SOX), and other established control frameworks. (Privacy, IEC 62443, MITRE)
• Working knowledge of operational technology, cloud security, enterprise architecture, and process design
• Experience in working with international teams and languages, preferably Spanish

Physical Requirements/Work Environment

• Occasional lifting to 25 lbs.

• Sitting, working at desk/personal computer for extended periods of time.
• Primary work environment is professional corporate office.
• Ability to travel commercially and internationally on a limited basis <15%.

Location

Virtual – US

Additional Locations

Chicago Office, Rochester, New York, San Francisco Office

Job Type

Full time

Job Area

Information Technology

Equal Opportunity

Constellation Brands is committed to a continuing program of equal employment opportunity. All persons have equal employment opportunities with Constellation Brands, regardless of their sex, race, color, age, religion, creed, sexual orientation, national origin or citizenship, ancestry, physical or mental disability, medical condition (cancer or genetic characteristics), marital status, gender (including gender identity or gender expression), familial status, military or veteran status, genetic information, pregnancy, childbirth, breastfeeding, or related conditions (or any other group or category within the framework of the applicable discrimination laws and regulations).