Cloud Risk and Compliance Analyst

POSITION SNAPSHOT Location: Meycauayan, Bulacan

Nestlé Business Solutions

Full time, Hybrid

Bachelor’s Degree

1+ year of experience

Position Summary Joining Nestlé means you are joining the largest food and beverage company in the world. At our very core, we are a human environment – passionate people driven by the purpose of enhancing the quality of life and contributing to a healthier future.

Our Team in Nestlé Business Solutions is in charge of delivering world class business support to our colleagues and clients in Nestlé globally. We are committed to deliver with passion, reliability, innovation, discipline and excellence. Are you ready to join us?

A day in the life of... Ensure cloud solutions used for business purposes in the market are identified, investigated, registered, assessed, and governed in accordance with the Cloud Compliance Process. Maintain reliable compliance records, coordinate timely assessments and remediation, and monitor Security Compliance Index (SCI) alerts for public cloud infrastructure. Provide clear status, risk, and escalation information to accountable Market IT, Market FRM, and governance stakeholders throughout the solution lifecycle.

• Cloud Discovery and Investigation
• Produce the agreed market cloud usage report and triage newly identified solutions
• Place applicable solutions Under Investigation and complete documented business-versus-personal-use investigations
• Recommend use of an approved global solution or escalation to the Market FRM for registration and assessment
• Maintain a complete and current Application Investigation and Exclusion Register with evidence, outcome, owner, status, and next action
• Cloud Assessment and Record Governance
• Create and maintain complete cloud solution records in Archer
• Coordinate required Business Impact Assessments, Privacy Impact Assessments, Cloud Compliance assessments, and reassessments with Business Owners, providers, and SMEs
• Track due dates, evidence, control requirements, decisions, and lifecycle status; escalate overdue or blocked items to the accountable owner
• Provide accurate compliance status and risk reporting for the assigned market portfolio
• Remediation and SCI Monitoring
• Define and track remediation plans with IT Application Owners and Business Owners for missing or non-compliant controls
• Monitor SCI alerts for public cloud infrastructure, assign actions, coordinate vendor remediation, and provide status to accountable Market IT
• Escalate overdue critical/high-risk findings, missed commitments, and unresolved control gaps through the agreed governance path
• Maintain effective working relationships across Market IT, Market FRM, governance teams, SMEs, Business Owners, and service providers

What Will Make You Successful

• Can join the team ASAP
• Graduate of bachelor’s degree in Information Technology
• Minimum of 6 months experience in IT
• Relevant experience in cloud governance, information security, technology risk, compliance operations, audit, or a related field
• Practical experience producing operational reports, investigating exceptions, maintaining evidence, and tracking actions through closure
• Working knowledge of SaaS, PaaS, and IaaS service models and public, private, hybrid, and community deployment models
• Ability to interpret standards and control requirements, assess risk, identify evidence gaps, and make clear recommendations
• Strong analytical, investigation, problem-solving, prioritization, and written documentation skills
• Confident English communication with technical and non-technical stakeholders, including providers and senior stakeholders
• Experience working across global, virtual, and cross-functional teams and coordinating across regions and time zones
• Relevant cloud, security, risk, audit, or privacy certification is advantageous but not mandatory, subject to the approved role standard