Job Description

:
India is among the top ten priority markets for General Mills, and hosts our Global Shared Services Centre. This is the Global Shared Services arm of General Mills Inc., which supports its operations worldwide. With over 1,300 employees in Mumbai, the center has capabilities in the areas of Supply Chain, Finance, HR, Digital and Technology, Sales Capabilities, Consumer Insights, ITQ (R&D & Quality), and Enterprise Business Services. Learning and capacity-building is a key ingredient of our success.
Position Title
D&T Analyst II - Cyber Security, Insider Threat & Awareness
Function/Group
Digital & Technology
Location
Powai, Mumbai
Shift Timing
11 am - 8 pm
Role Reports to
D&T Manager - Cyber Security, Insider Threat & Awareness
Remote/Hybrid/in-Office
Hybrid
ABOUT GENERAL MILLS
We make food the world loves: 100 brands. In 100 countries. Across six continents. With iconic brands like Cheerios, Pillsbury, Betty Crocker, Nature Valley, and Hxc3xa4agen-Dazs, weve been serving up food the world loves for 155 years (and counting). Each of our brands has a unique story to tell.
How we make our food is as important as the food we make. Our values are baked into our legacy and continue to accelerate
us into the future as an innovative force for good. General Mills was founded in 1866 when Cadwallader Washburn boldly bought the largest flour mill west of the Mississippi. That pioneering spirit lives on today through our leadership team who upholds a vision of relentless innovation while being a force for good. For more details check out
General Mills India Center (GIC) is our global capability center in Mumbai that works as an extension of our global organization delivering business value, service excellence and growth, while standing for good for our planet and people.
With our team of 1800+ professionals, we deliver superior value across the areas of Supply chain (SC) , Digital & Technology (D&T) Innovation, Technology & Quality (ITQ), Consumer and Market Intelligence (CMI), Sales Strategy & Intelligence (SSI) , Global Shared Services (GSS) , Finance Shared Services (FSS) and Human Resources Shared Services (HRSS).For more details check out
We advocate for advancing equity and inclusion to create more equitable workplaces and a better tomorrow.
JOB OVERVIEW
Function Overview
The Digital and Technology team at General Mills stands as the largest and foremost unit, dedicated to exploring the latest trends and innovations in technology while leading the adoption of cutting-edge technologies across the organization. Collaborating closely with global business teams, the focus is on understanding business models and identifying opportunities to leverage technology for increased efficiency and disruption. The team's expertise spans a wide range of areas, including AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain, SAP S4 HANA and Enterprise Architecture. The MillsWorks initiative embodies an agile@scale delivery model, where business and technology teams operate cohesively in pods with a unified mission to deliver value for the company. Employees working on significant technology projects are recognized as Digital Transformation change agents.
The team places a strong emphasis on service partnerships and employee engagement with a commitment to advancing equity and supporting communities. In fostering an inclusive culture, the team values individuals passionate about learning and growing with technology, exemplified by the "Work with Heart" philosophy, emphasizing results over facetime. Those intrigued by the prospect of contributing to the digital transformation journey of a Fortune 500 company are encouraged to explore more details about the function through the following
Purpose of the role
The Security Awareness and Insider Threat Analyst is responsible for developing, implementing, and managing security awareness programs to educate employees on security best practices and protect, detect and respond to risks posed by insider threats. This role combines expertise in threat detection and prevention with a strong focus on cultivating a security-conscious culture within the organization. The analyst will monitor and analyze insider threat activities, respond to incidents, and collaborate with various departments to enhance the organization's overall security posture.
KEY ACCOUNTABILITIES
xc2xb7 Monitor and analyze user activities for signs of potential insider threats.
xc2xb7 Develop and maintain threat detection tools, techniques, and procedures.
xc2xb7 Utilize threat intelligence platforms to gather, analyze, and disseminate relevant information.
xc2xb7 Perform advanced analysis of insider threat and DLP alerts across various egress channels in on-premise and cloud environments, prioritizing threats using available tools.
xc2xb7 Investigate and document event/alert patterns, collaborating with Cyber Defence, Legal, Privacy, and HR teams during incidents as necessary.
xc2xb7 Create detailed reports on security incidents, investigations, and mitigation efforts.
xc2xb7 Contribute to refining detection tool policies, rules, and operational documents by highlighting areas for improvement.
xc2xb7 Lead the simulated phishing program, including metrics and executive summaries.
xc2xb7 Coordinate with internal and external partners to develop and update quality training content.
xc2xb7 Develop and distribute enterprise-wide communications on information security risks and guidance.
xc2xb7 Create marketing materials and content for global Security Awareness events, including in-person site events as needed.
xc2xb7 Ensure the security awareness program effectively communicates security policies, fostering a global security culture.
MINIMUM QUALIFICATIONS

• Education Full time graduation from an accredited university (Mandatory- Note: This is the minimum education criteria which cannot be altered)
• Minimum 4 years of experience in SOC, Incident Response, Insider Threat or Security Awareness.

PREFERRED QUALIFICATIONS

• Excellent written, verbal communication and presentation skills.
• Ability to create engaging and effective training materials.
• Strong organizational and project management skills.
• Ability to work effectively in a team environment and collaborate with various stakeholders.
• Certifications: The following certificates are preferred but not mandatory,

• CompTIA Security+
• CompTIA Cybersecurity Analyst (CySA+)
• EC-Council Computer Hacking Forensics Investigator (CHFI)
• EC-Council Certified Incident Handler (ECIH)
• SANS GIAC Security Essentials (GSEC)
• Microsoft Certified: Azure Fundamentals (AZ900)
• Microsoft Certified: Information Protection and Compliance Administrator Associate (SC400)

COMPANY OVERVIEW
We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best xe2x80x94 bold thinkers with big hearts who challenge one other and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for whats next.