About the role
P&G is hiring for the role of Information Security Engineer!
Responsibilities of the Candidate:
- Program & Governance: Own the end-to-end Infosec & Data Privacy program — run the Governance Board and fortnightly project reviews, maintain the annual action plan, and drive the Privacy Council / Champions / RoPA Owner operating rhythm.
- Data Privacy Compliance: Own the RoPA lifecycle (new reviews, monthly attestation, approvals, migration) and drive regulatory compliance, notably DPDP, coordinating SPOCs across global systems.
- Mock Audits (Infosec & Privacy): Plan and run mock audits per internal guidance — sampling (~30% of RoPAs), reviewing all SCOPE elements, driving closures, and supporting 2LOD/GIA audit readiness.
- Quality & Continuous Assurance: Own the Infosec & Data Privacy Scorecard (App Reg, BIA, iRisk, RoPA, Pen Test, WIZ, VSS, Access Mgmt), track gaps, drive root-cause analysis and remediation.
- Stakeholder Management & Reporting: Present progress, gaps, and risks to ILT and leadership; partner with 2LOD, Legal, Purchases, and BU SPOCs; manage TPRM governance for Infosec & Privacy.
Requirements
- Strong program/project management — governance drum-beats, action tracking, and executive reporting.
- Deep knowledge of Data Privacy compliance (RoPA, DPDP, consent/notice, retention, DSR) and Information Security controls.
- Experience running audits/mock audits and building compliance scorecards and quality dashboards.
- Executive-ready communication; ability to distill complex compliance data into crisp leadership updates.
- Certifications like CISSP / CISM a strong plus