Consultant - Data Protection & Privacy Management

General Mills

General Mills

Mumbai, Maharashtra, India
Posted on Saturday, May 13, 2023

Job Description

India is among the top ten priority markets for General Mills, and hosts our Global Shared Services Centre. This is the Global Shared Services arm of General Mills Inc., which supports its operations worldwide. With over 1,300 employees in Mumbai, the center has capabilities in the areas of Supply Chain, Finance, HR, Digital and Technology, Sales Capabilities, Consumer Insights, ITQ (R&D & Quality), and Enterprise Business Services. Learning and capacity-building is a key ingredient of our success.

Shift Timings - Regular 


About General Mills
We make food the world loves: 100 brands. In 100 countries. Across six continents. With iconic brands like Cheerios, Pillsbury, Betty Crocker, Nature Valley, and Häagen-Dazs, we’ve been serving up food the world loves for 155 years (and counting). Each of our brands has a unique story to tell.

How we make our food is as important as the food we make. Our values are baked into our legacy and continue to accelerate us into the future as an innovative force for good. General Mills was founded in 1866 when Cadwallader Washburn boldly bought the largest flour mill west of the Mississippi. That pioneering spirit lives on today through our leadership team who upholds a vision of relentless innovation while being a force for good. The awards and recognition we’ve received showcase our commitment to be a force for good:

• World’s Most Admired Companies, Fortune 2022
• America’s Most Responsible Companies, Newsweek 2022
• 100 Best Corporate Citizens, 3BL 2021
• Best Places to Work for LGBTQ Equality, Human Rights Campaign 2022
• 100 Best Companies, Seramount 2021
• Diversity Best Practices Leading Inclusion Index, Seramount 2021
• Best Companies for Dads, Seramount 2021
• Best Companies for Multicultural Women, Seramount 2021
• Top 10 Companies for Executive Women, Seramount 2021
• Military Friendly Employer Bronze, VIQTORY 2021
• Best Place to Work, Canada, Greater Toronto, 2021
• Top 50 – India’s Best Workplaces for Women, 2021
• Top Workplaces in Brazil, 2021
• Asia’s Best Workplaces, 2021


Hungry for What’s Next
We exist to make food the world loves, and it shows. Our passion for people, doing good and creating delicious food has energized us for over 150 years. Breaking away from the pack is how we win, so we need your unique perspectives: your quirks, ‘crazy’ ideas, rigor and insatiable curiosity to make it happen. We want people who constantly experiment, embracing the new and bold, who keep pushing to turn ideas into reality, no matter how big or small. We’ve learned becoming the undisputed leader in food means continuously reshaping, reimagining and rebuilding— that only happens when you surround yourself with those who are hungry for what’s next.


For more details check out www.generalmills.com


General Mills India Centre
General Mills India Center (GIC) operates out of Mumbai and supports the global operations of General Mills. The center was established in 2005 and has grown in strength. Today, we are a vibrant and diverse team of over 1500 employees that come together to champion business services for the various global entities of General Mills in the areas of Business Operations, Analytics Consulting, Logistics, Finance, IT Development & Technology Consulting, Consumer & Market Intelligence, Sales Capabilities, Research & Development.


Digital and Technology team
Digital and Technology is the largest team in GIC, which focuses on understanding the latest and innovative trends in technology and leading the adoption of cutting-edge technologies at General Mills. The team closely collaborates with global business teams to understand business models and assess where technology can leveraged to bring efficiency and disruption. Be it AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain or Enterprise Architecture, GIC Digital and Technology has something for every technology enthusiast who wants to work here. Our MillsWorks initiative is where we bring agile@scale delivery model to life. Here, business and technology teams work cohesively in pods as ONE team, driven by a singular mission and focused on delivering value for the Company. Our employees, who work on large technology projects of strategic importance, are the Digital Transformation change agents.

Our service partnerships and employee engagement are centered on advancing equity and strengthening communities. We believe in an inclusive culture and trust in the power of people who have a passion for learning and growing with technology. We believe in “Work with Heart”. Work with Heart is focused on results, not facetime. If you are passionate about the latest in technology and want to make an impact on the digital transformation journey of a Fortune 500 company, we're waiting for you.


Cyber Security Team
Cyber Security is a critical part of Digital and Technology function. We leverage the NIST Cybersecurity Framework, key cybersecurity partners, and external benchmarking to guide the development of our program. Cybersecurity risk is managed as part of enterprise risk at GMI. We assess technical cybersecurity risks and vulnerabilities and provide recommendations to mitigate them. We design and manage cybersecurity infrastructure, identities, and controls and we monitor for any threats and ensure timely and comprehensive response to cyber-attacks. We also measure and report compliance to cybersecurity policies and standards.


Job Overview
Role: Consultant, Data Protection & Privacy
Location: Mumbai
This role is responsible for supporting the execution of how General Mills appropriately protects consumer data from cyber-attack, including how this data is internally secured, and will ensure associated privacy directives are being implemented accordingly. This will be accomplished by partnering across D&T, Law, Business Security Managers, and key business partners to identify risks to personal data, and working across those teams to provide and implement mitigation recommendations, in accordance with General Mills overall Data Protection and Privacy Management strategy.


Role Responsibilities

45% of Time Data Protection Execution
• Regularly meet with relevant stakeholders to provide tactical direction in the development and execution of data management plans.
• Communicate plans to protect personal data to peers across Business Security Managers, Digital Core, Solution Development, Data Management Plan owners, DD&A, and Cyber Security
• Conduct regular assessments of compliance for GMI digital capabilities to assess privacy risk and propose mitigating efforts.
• Support the creation of personal data inventory to appropriately record data flows within GMI systems, cloud environment, and third-party vendors.
• Act as an internal consultant to business stakeholders to interpret issues related to the privacy regulatory requirements.
• Support technical support for privacy related technologies.
45% of Time Privacy Management
• Apply an established universal level of privacy governance across all personal data types, and ensure this governance is both reasonable and actionable.
• Stay up-to-date on emerging personal information - oriented privacy laws, as well as changes to existing privacy laws, and be prepared to provide an impact assessment of those changes to relevant stakeholders
• Partner with the Data Privacy team on the implementation of privacy directives across our technology landscape, as it pertains to personal information.

10% of Time Partnerships and Benchmarking
• Maintain existing and develops new contacts within the candidate’s professional network of cyber security/Privacy peers and leading security consultants/vendors.
• Continuously develops knowledge of evolving best practices and trends through peer benchmarking, industry events/associations, and educational opportunities.
• Share knowledge and trends within the Cyber Security team to improve General Mills’ cyber security awareness.


Must - have technical skills and experience
• Technical Expertise supporting Privacy related technologies (OneTrust)
• Knowledge of privacy laws and the relationship they have with cyber security and I
• Successful track record of positively influencing stakeholders.
• Strong communication and presentation skills.
• Experience establishing strong working relationships with business partners.
• A working knowledge of cyber security, cyber security technology, risk assessment, privacy compliance and management.
• Successful track record of positively influencing stakeholders.
• Strong communication and presentation skills.
• Experience establishing strong working relationships with business partners.
• A working knowledge of cyber security, cyber security technology, risk assessment, privacy compliance, and management.
• Demonstrated ability to work across organizational boundaries, and influence others.
• Ability to work on an agile product team; define and manage internal projects and milestones; and demonstrated leadership skills.
• Strong interpersonal, verbal, presentation, and written communication skills.
• Ability to effectively present to a wide range of audiences.
• Comfortable shifting priorities and simultaneously engaging in and managing multiple projects.
• Ability to make decisions and solve problems especially where there is ambiguity.
• Ability to influence through relationship building and executive presence.
• Ability to work both independently and in a collaboratively in a team environment.
• Discretion, integrity, and independent sound judgment in both designing and implementing processes.
• Strong analytic skills with a penchant for metrics.


Good to have skills

Certified Information Systems Security Professional (CISSP), Certified Information Privacy Professional (CIPP), and/or public sector equivalent.


Skill proficiency expectations

Expert level

Intermediate Level

Basic Level

·       Data Flow in General Mills

·       Understanding of Data and the protection laws in various regions



We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one other and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.