Sr Analyst, Information Security Compliance

Job : 17604

Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco®, Coleman®, Oster®, Rubbermaid®, Sharpie® and Yankee Candle® - and 24,000 talented teammates around the world. Our culture is built on values in action:
Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day.

The Information Security Compliance Senior Associate is an intermediate-level professional within the Global Information Security Risk & Resilience team at Newell Brands. Reporting to the Information Security (IS) Compliance Manager, this role executes the day-to-day operational delivery of the IS compliance program and contributes substantively to its continued maturation. The Compliance Manager retains program accountability; the Senior Associate operates with routine oversight, exercises independent judgment and discretion on moderately complex assignments, interprets regulatory requirements, and communicates compliance practices to stakeholders within the team and across the business.

Working closely with cross-functional stakeholders, the Senior Associate supports compliance with internal policies, regulatory requirements, and industry standards, supports risk management activities, and uses data analytics to deliver actionable insights that strengthen the organization's security posture. The Senior Associate also serves as a subject-matter resource and mentor to junior team members and contributes to process improvement, automation, and data-driven decision-making.

The role focuses primarily on Information Security compliance (70%), Artificial Intelligence (AI) governance and compliance (15%), Information Security risk management (5%), and data analysis and reporting of the compliance domain (10%).

• Support Payment Card Industry Data Security Standard (PCI-DSS) compliance across Newell Brands by coordinating control assessments, managing evidence collection, and supporting certification, audit, and remediation activities across business units and technology teams.

• Contribute to the Network and Information Security Directive 2 (NIS2) program for Newell's European Union (EU) operations and support the cybersecurity components of California Consumer Privacy Act (CCPA) audit readiness in an advisory capacity, recognizing that data privacy accountability sits outside the Information Security remit.

• Support the build-out and continued maturation of Newell's internal Information Security compliance program by contributing to the design and maintenance of a scalable, risk-based compliance framework.

• Monitor, analyze, and report on compliance metrics and performance, providing insights and recommendations to senior leadership.

• Coordinate across business and functional stakeholder teams to manage compliance projects, including data identification, collection, processing, and review.

• Provide the Information Security compliance perspective into Newell's enterprise AI governance activities, supporting the establishment of foundational processes and controls that help the business adopt AI responsibly and in line with applicable regulatory requirements.

• Assess AI tools and use cases proposed by internal stakeholders for compliance implications under PCI-DSS, NIS2, and Newell's internal security policies.

• Contribute to the development of AI compliance controls from an Information Security standpoint as the organization's AI footprint expands, aligned with the National Institute of…