IT Governance & Compliance Lead

Location: Req ID: 90213 Facility: POZNAN-6731 Department: Strategic Cybersecurity Division: Innovation LyondellBasell is a leader in the global chemical industry creating solutions for everyday sustainable living. With a nearly 70-year legacy that includes a Nobel Prize in Chemistry and our proprietary MoReTec recycling technology, LYB is enabling a more sustainable future for generations to come. LYB develops high-quality and innovative products for applications ranging from sustainable transportation and food safety to clean water and quality healthcare. LYB places high priority on diversity, equity and inclusion and is Advancing Good with an emphasis on our planet, the communities where we operate and our future workforce. We're addressing the global challenges of ending plastic waste, taking climate action, and supporting a thriving society, while generating value for our customers, investors, and society. Come Join an Inclusive Team The IT Governance Lead functions as a governance and compliance leader responsible for, advancing, and overseeing the IT governance program, ensuring enterprise-wide alignment to policy and standards, and influencing strategic technology decisions through effective risk and control oversight. The IT Governance Lead will have responsibility for providing both tactical and strategic leadership in the enhancement of the IT and Cybersecurity organization’s governance programs which include technical change management, third party risk management, and validation of effectiveness for disaster resiliency, risk management, and technical control performance. The role will work closely with the Cybersecurity, and IT teams ensuring conformity with policy and standards. This role will provide guidance and support initiatives leading to the adoption, execution and validation of operational and information protection policy requirements. Applicant will serve as a subject matter expert to process owners, providing expertise with respect to risks and controls, analyzing the impact of process changes on the control structure, and bringing forth opportunities to better the business and influence decisions regarding IT governance and compliance. A Day in the Life • Lead the development, implementation, and maintenance of effective information protection governance programs to support current and future needs • Enhance and maintain LYB’s IT risk assessment program to evaluate IT compliance and operational risks that require follow-up, investigations, or risk management strategies • Continually improve LYB’s information security management system within the context of the ISO 27001 and NIST standards. • Serve as an IT policy and standards subject matter expert reviewing policies and standards against emerging threats, legislative and regulatory changes, and customer expectations ensuring information protection priorities are considered throughout the portfolio • Coordinate the annual review of IT policies and standards and as needed, working with the “owners” to make revisions and updates obtaining approval from leadership • Serve as a consultant to process and control owners, providing expertise with respect to risks and controls, analyzing the impact of process changes on the control structure, and driving solutions to process owner barriers • Support IT Compliance team in executing its annual risk-based process and controls validation • Manage the company’s GRC tool(s) in regard to the areas of information security, policy, compliance, and risk management. • Support the Poznan Center of Excellence as a governance, risk and compliance expert. • Mentor on technology-related processes and business drivers You Bring This Value • Bachelor’s degree in computer science, information systems, business administration, or related field • 10+ years of practical experience in IT Compliance, Governance Management, and/or IT Audit • Three to five years of experience related to policy design standards and management as it applies to relevant regulations such as ISO, COBIT, COSO, NIS2 and NIST guidelines. • Strong competency with SOX, COBIT, ISO 27001, policy, frameworks and compliance • Strong communication and interpersonal skills • Detailed oriented and proficient in written and oral communications • Ability to work efficiently and independently with minimal supervision or guidance. DESIRABLE • CISSP, QSA, CISA or other security recognition • Experience developing and maintaining global standards and performing risk assessments • Problem-solving, negotiation and decision-making skills to influence management, as well as internal and external partners • Working knowledge of an ERP system (e.g. SAP) • Intercultural competence Competencies Build Partnerships Drive Innovation Grow Capabilities Promote Inclusion Motivational Fit Technical Skills Deliver Results What We Offer We offer an environment where we encourage personal and professional growth and where you will be rewarded for your performance and results. You will have the possibility to work with specialist on all fields to develop innovative solutions and to extend your national and international network. In addition, we offer you a competitive salary and benefits package. The Company's Global Remote Work Policy allows eligible employees the option to work up to three days a week from home. LyondellBasell is committed to advancing diversity, equity & inclusion (DEI) to ensure a positive experience for all employees. Application & Contact Please send us your resume via the application button. If you would like to learn more, please feel free to contact Martyna Piechowiak, Talent Acquisition Specialist at [email protected] #LI-MP1 #LI-Hybrid Privacy Statement: For information regarding how LyondellBasell processes your personal data, please read our Privacy Statement Stay Connected! Visit our LYB Website Follow us on LinkedIn and Instagram Like us on Facebook Subscribe to our YouTube channel