Job Description Are You Ready to Make It Happen at Mondelēz International? Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours. You work with the information security team as a competent and experienced information security and compliance leader. How you will contribute You will assess information security risks in line with internal policies and external best practices and determine requirements how to secure Mondelēz International information and IT assets. In addition, you will develop security standards and policies; advise technical teams when developing relevant procedures or have operational security questions; review and consulting them on compliant and effective use of common tools. You will also keep business stakeholders apprised on the overall security and compliance roadmap, provide training on information security to appropriate teams, and develop security strategies, architectures and roadmaps across process and technologies. What you will bring A desire to drive your future and accelerate your career. You will bring experience and knowledge in: - Information security, compliance and risk management - Understanding security solutions and their applicability to Mondelēz International - Developing security strategies, awareness campaigns, policies/standards, and governance - Communicating effectively with technical specialists, leaders and peers - Commercially astute - Leadership and people management skills About the Role As a Fortune 100 global consumer packaged goods company operating across dozens of markets, our attack surface spans complex multi-cloud environments, global manufacturing and supply chain infrastructure, thousands of applications, and an increasingly interconnected OT/IoT ecosystem. The Head of Attack Surface Management is a critical senior leadership role responsible for unifying our exposure management capabilities into a single, accountable function that delivers continuous visibility, risk-based prioritization, and measurable reduction of our enterprise attack surface. This leader will own the strategy, execution, and maturation of four integrated disciplines-Cloud Security Posture Management, Vulnerability Management, Offensive Security, and Application Security-ensuring they operate as a cohesive program. The successful candidate will combine deep technical expertise with executive presence, translating complex exposure data into business risk language that drives action at the highest levels of the organization. This role is an exceptional opportunity to shape and lead a critical security function at one of the world's largest consumer packaged goods companies, protecting a brand portfolio trusted by billions of consumers globally. Key Responsibilities Strategic Leadership & Program Ownership - Own the end-to-end attack surface management strategy, roadmap, and operating model, aligning priorities to enterprise risk appetite and business objectives across a global CPG environment. - Establish unified standards for exposure scoring, risk-based prioritization, and SLA enforcement across all four disciplines. - Own the exposure management platform and tooling strategy, including build-vs-buy decisions, vendor consolidation, and integration architecture to deliver a single pane of glass for enterprise risk posture. - Build and present executive-level reporting on attack surface risk, remediation velocity, and residual exposure to the CISO, executive leadership, and Board-level audiences. Cloud Security Posture Management (CSPM) - Drive cloud security posture management across multi-cloud environments (AWS, Azure, GCP), including misconfiguration detection, IAM entitlement risk analysis, and policy enforcement at scale. - Partner with cloud engineering and DevOps teams to embed preventive guardrails, IaC policies, and automated remediation, operating within the organization's Product and Platform model. - Ensure continuous compliance monitoring against regulatory frameworks across all cloud workloads, including containers, serverless, and managed services. Vulnerability Management - Lead enterprise vulnerability management covering infrastructure, endpoints, network devices, and OT/IoT environments across global manufacturing and supply chain operations. - Establish and enforce scanning cadence, risk-based patching SLAs, exception governance, and escalation paths for aged or critical findings. - Own data quality, asset attribution, and integration between scanning platforms, CMDB, ticketing systems, and risk dashboards. Offensive Security - Direct the offensive security function, including internal red team operations, penetration testing, purple team exercises, and adversary simulation aligned to real-world threat actor TTPs. - Ensure offensive findings feed directly into the vulnerability and remediation pipeline with clear SLAs, validating detection and response effectiveness with the SOC and detection engineering teams. Application Security - Own application security across the entire SDLC, including SAST, DAST, SCA, secrets detection, container scanning, IaC security, and API security testing. - Partner with engineering and product leadership to embed security into CI/CD pipelines and shift remediation left, aligning AppSec as a platform capability for product teams. Team Leadership & Vendor Management - Build, lead, and develop a high-performing team of managers and senior individual contributors across all four disciplines, including hiring, performance management, and succession planning. - Manage vendor relationships and commercial negotiations for scanning, ASM, CSPM, AppSec, and offensive security tooling, driving consolidation and value optimization. - Foster a culture of collaboration and continuous improvement, ensuring the team operates as an enabling platform service to internal product and platform partners. Required Qualifications - 12+ years in cybersecurity with progressive leadership experience, including 5+ years managing multi-disciplinary security teams at a senior manager or director level. - Demonstrated ownership of at least two of the four core disciplines (CSPM, Vulnerability Management, Offensive Security, Application Security) at a program level-including strategy, budget, staffing, and executive reporting. - Experience operating within a Product and Platform operating model, delivering security capabilities as platform services that enable product teams to move fast and securely. - Strong working knowledge of cloud architecture and cloud-native security controls across AWS, Azure, and/or GCP in complex multi-cloud environments. - Hands-on experience with enterprise vulnerability management platforms (e.g., Tenable, Rapid7, Qualys), CSPM tools (e.g., Wiz, Prisma Cloud, Orca), and AppSec tooling (e.g., Snyk, Checkmarx, Veracode). - Familiarity with NIST CSF, MITRE ATT&CK, OWASP Top 10, CIS Controls, and CVE/CVSS/EPSS scoring methodologies. - Proven ability to communicate complex technical risk to non-technical executive audiences and drive cross-functional remediation accountability. - Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field-or equivalent professional experience. - Relevant certifications preferred: CISSP, OSCP, GPEN, GXPN, CISM, or equivalent. Preferred Qualifications - Experience in a large, global enterprise environment, ideally within CPG, manufacturing, retail, or industries with complex supply chain and OT/IoT environments. - Track record of presenting cyber risk posture to executive leadership and Board of Directors, including translating exposure metrics into financial risk quantification. - Demonstrated success consolidating fragmented security functions into a unified exposure management program with measurable risk reduction outcomes. - Experience with CAASM/EASM platforms and risk-based prioritization frameworks beyond raw CVSS scoring (e.g., EPSS, business context enrichment, asset criticality weighting). - Experience operating in regulated environments across SOX, GDPR, FDA, PCI-DSS, or equivalent frameworks. - MBA or advanced degree in a relevant field is a plus. Additional Information - Reports To: Chief Information Security Officer (CISO) - Work Schedule: standard working hours (Mon-Fri). This is a remote position; candidate must be located in the UK. - This is a full-time position with permanent contract. - Travel requirements: candidate must have availability for travelling according to business needs. No Relocation support available Business Unit Summary At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about. We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum. Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast. Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. Job Type Regular Information Security Technology & Digital

Role Description We are looking for an experienced Client Account Manager to oversee our remote working agents on multiple USA-client accounts specialising in ABA Therapy services. We're looking for someone who has managed agents in a BPO or contact centre environment within the ABA Therapy industry and understands how to balance client expectations with operational performance. You will be responsible for managing a portfolio of ABA client accounts, supporting remote agents, monitoring operational performance, driving KPIs and acting as the primary operational contact for your assigned ABA clients. PLEASE NOTE: - Working Hours: 16:00pm – 01:00am OR 15:00pm - 00:00am South African Time, depending on daylight savings in the USA, however must be flexible to work overtime and be available over weekends if needed. - Work Environment: This is a fully remote working role. - You will be required to work on both South African and US public holidays (compensation for SA public holidays in accordance with the BCEA). - Internet Requirements: A fixed fibre line with a minimum speed of 25 Mbps (upload & download) and the ability to support a wired Ethernet connection is mandatory. Applicants without a fixed fibre line cannot be considered. - Power Backup: A reliable power backup solution is required to manage load shedding and power outages. Applicants without a power backup cannot be considered. Qualifications - ABA Therapy Industry experience is a non-negotiable. - BPO or Call Centre Operations experience. - Highly organised with the ability to manage multiple priorities across several client accounts, in a fast-paced environment. - Excellent coaching and problem-solving skills. - Strong understanding of KPIs, SLAs, productivity and performance management. - Confident presenting reports and discussing performance with clients and internal stakeholders. Requirements - Manage the day-to-day operations of multiple USA client accounts in the ABA Therapy Industry. - Lead, coach and support remote agents to achieve performance, productivity and quality targets. - Monitor attendance, adherence, productivity and KPIs, addressing performance concerns proactively. - Conduct regular one-on-one coaching sessions and performance reviews with assigned agents. - Build strong working relationships with assigned clients and serve as their primary operational contact. - Respond to client enquiries, concerns and operational escalations promptly and professionally. - Work closely with the Client Success Manager to ensure a consistent client experience. - Analyse operational data and identify trends, risks and opportunities for improvement. - Prepare and present weekly and monthly operational performance reports. - Coordinate staffing, scheduling and resource planning to meet client requirements and service level agreements. - Collaborate with Recruitment, HR, IT and Operations teams to ensure smooth onboarding and ongoing support for client accounts. - Drive continuous improvement initiatives that enhance both client satisfaction and operational efficiency. Company Description

• Own and deliver territory and account plans to achieve agreed goals and KPIs • Identify, prioritize, and develop key customer relationships in line with product strategy • Use CRM tools to manage call planning, tracking, and follow-up activities effectively • Build trusted relationships with key external experts and decision-makers • Act as a local product expert and deliver compliant, high-quality product information using approved materials • Plan and execute live and virtual customer events and presentations • Monitor market trends and gather competitive intelligence, sharing relevant insights with internal teams • Work in full alignment with AbbVie policies, SOPs, ethical standards, and applicable regulations

Role Description We're looking for an Account & Programmes Manager to join our team and play a key role in being responsible for the day-to-day oversight of key vehicle manufacturer Body & Paint programmes, acting as the customer's primary point of contact and owning delivery of the contract against agreed KPIs and SLAs. The role directs and manages internal operational and project teams to deliver the programme objectives, while identifying opportunities to grow the account through additional business and revenue development activity. Key Responsibilities - Account & Contract Management - Act as the lead point of contact and account owner for the vehicle manufacturer Body & Paint programmes, managing the relationship across all levels of the customer organisation. - Responsible for delivery of overall contract performance, ensuring delivery against agreed KPIs, SLAs and commercial terms. - Lead regular account and contract performance reviews with the customer and internal stakeholders. - Monitor programme performance, resolve escalations and drive continuous improvement across the account. - Team Management - Direct and coordinate cross-functional operational teams to ensure the programme is delivered on time, to specification and within budget. - Set clear performance expectations for delivery teams and hold them accountable for programme outcomes. - Act as the escalation point for delivery issues, ensuring timely resolution and clear communication with the customer. - Relationship Management - Build, manage and strengthen long-term relationships with key stakeholders across the vehicle manufacturer account. - Act as a trusted commercial partner, consistently demonstrating Avant's value proposition and technical expertise. - Professionally represent the business at client meetings, industry events and commercial forums. - Programme & Business Development - Identify opportunities to expand the scope of the existing and future programmes and introduce new value-added services within the account. - Support development of commercial proposals, programme extensions and business cases for the account. - Contribute to the wider Automotive Division growth strategy through account-based development activity. Qualifications - Proven experience in an account management, contract management or programme management role within the automotive sector, ideally supporting a vehicle manufacturer body & paint programme. - Demonstrable track record of managing contract performance against agreed KPIs and SLAs. - Experience developing customer-focused, differentiated and commercially viable solutions. - Proven ability to lead and direct multi-disciplinary operational, technical and project teams to achieve contracted outcomes. - Ability to communicate effectively at all levels, including senior leadership and Board members. - Highly motivated, proactive and commercially minded with strong initiative. - High standard of written communication, grammar, and document production. - Strong analytical skills with the ability to interpret data, statistics, and performance metrics. - Excellent IT skills, including Word, Excel, and PowerPoint. Benefits - 33 days holiday, including bank holidays - Personal health cash plan – claim back the cost of everyday healthcare such as dental and optical check-ups - Enhanced maternity, paternity, adoption and shared parental pay - Life assurance at three times your basic salary - Free breakfasts and fresh fruit - A birthday surprise for everyone