Our IT Audit Manager for Data Privacy performs complex-level professional internal audit work across all Mars segments. Work involves guiding and conducting audit projects; providing consulting services to the organization’s management and staff; and providing key input to developing the risk-based annual internal audit plan, with a focus on data privacy.

What are we looking for?

• Audit experience with a “Big 4” accounting or IT consulting firm.
• Exposure to privacy policies, regulations, privacy or technology law, policies, and programs.
• Experience in privacy controls testing, issue management, and remediation.
• Strong command of data privacy values and solid foundational understanding of key industry-leading regulations including GDPR, CCPA, etc.
• Ability to define data privacy standards and data handling procedures that integrate with key business processes.
• Knowledge of contemporary privacy regulations, IT risk management and control techniques, and security control frameworks.
• Skill in collecting and evaluating complex data, evaluating information and systems, and drawing rational conclusions.
• Considerable skill in effective verbal and written communications, including engaged listening skills and presenting findings and recommendations for improvement to managers at each location, as well as other senior managers.
• Considerable skill in planning, project management, and maintaining composure under pressure while meeting multiple deadlines.
• Ability to establish and maintain harmonious working relationships with colleagues and external contacts, and to work effectively in a professional team environment.
• Knowledge and/or experience with concepts including design thinking, user-centricity, and agile are preferred.
• Good command of written and spoken English is a must.
• Ability to travel up to 20%.

What will be your key responsibilities?

• Evaluate the organization’s privacy risk areas and provide key input to developing the risk-based annual internal audit plan.
• Perform audit procedures, including identifying and defining issues, developing criteria, reviewing and evaluating evidence, and documenting client processes and procedures to ensure systems comply with Mars privacy program standards.
• Conduct interviews, review documents, and prepare working papers.
• Identify, develop, and document privacy-related audit issues and recommendations for improvement using judgment concerning areas being reviewed.
• Communicate or assist in communicating the results of audit and consulting projects via written reports and oral presentations on a timely basis to senior management.
• Develop and maintain productive team-oriented relationships within the team and across the organization through contacts and group meetings, particularly with the Privacy Team which is a key business partner for all privacy-related audits.
• Coaching and consulting business units, Mars Global Services (MGS) and Corporate on Mars privacy governance, risk, and control standards.
• Pursue professional development opportunities, including external and internal training and professional association memberships, and share information gained with co-workers.
• Assess the impact and potential privacy risk related to third-party vendors.

What can you expect from Mars?

• Work with over 130,000 diverse and talented Associates, all guided by the Five Principles.
• Join a purpose-driven company, where we’re striving to build the world, we want tomorrow.
• Best-in-class learning and development support from day one, including access to our in-house Mars University.
• An industry-competitive salary and benefits package, including company bonus.

Mars is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. If you need assistance or an accommodation during the application process because of a disability, it is available upon request. The company is pleased to provide such assistance, and no applicant will be penalized as a result of such a request.