Associate Manager, IT - Governance, Risk & Compliance

Job description

## Job Description Here at Kraft Heinz, we grow our people to grow our business, because we believe that great people make great companies. When you join our table, you can expect access to an array of holistic wellness benefits\* and perks, including medical, dental and vision coverage, 7% 401(k) matching, Business Resource Groups (BRGs) to help foster diversity, inclusion, and belonging for all employees, an industry-leading total rewards package that emphasizes a high discretionary bonus. \*Benefits begin immediately upon hire for salaried employees. Get a peek into life here at Kraft Heinz through our [Instagram](https://www.instagram.com/hereatkraftheinz/?img_index=1) and [TikTok](https://www.tiktok.com/@hereatkraftheinz) channels! ## Associate Manager, IT - Governance, Risk & Compliance at a glance... You will play a critical role in strengthening and maintaining our organization's security posture. You will be responsible for managing the life cycle of security policy exceptions, assisting with third-party security risk assessments and continuous control maturity assessments and manage the security metrics program. ## What's on the menu? - Manage and monitor the central GRC and security mailbox, acting as the first line of response for employee inquiries. - Administer the security policy exception lifecycle from initial request to final approval, extension, or remediation. - Review incoming exception requests to evaluate business justification against potential security risks. - Maintain the centralised security exceptions register, proactively tracking expiration dates and initiating review processes before the exceptions lapse. - Conduct reviews of vendor security documentation, including SOC 2 type 2 reports, ISO 27,001 certificates, penetration test summaries, and custom security questionnaires. - Identify, document, and communicate third party risks to business owners, and track vendor remediation efforts for any identified control gaps. - Collaborate with procurement and legal teams to ensure appropriate data protection and information security clauses are embedded in vendor contracts. - Initiate, conduct and manage cyber controls maturity assessments. ## Recipe for Success - apply now if this sounds like you! - I have 4+ years of relevant information security experience. - I am familiar with Foundational security frameworks and regulations (e.g., NIST CSF, ISO 27,001 and GDPR). - I have exceptional written and verbal communication skills with the ability to translate security concepts into simple and actionable guidance for non-technical employees. - I have strong organizational skills and high attention to detail. - I have demonstrable skills in building relationships with the business and a willingness to learn. ## Please note: This job posting is just a preview of the full scope of the position. A comprehensive job description will be shared. ## ## We hope to find you a seat at our table! Our Total Rewards philosophy is to provide a meaningful and flexible spectrum of programs that equitably support our diverse workforce and their families and complement Kraft Heinz’ strategy and values. **New Hire Base Salary Range:** $89,800.00 - $112,200.00 **Bonus:** This position is eligible for a performance-based bonus as provided by the plan terms and governing documents. *The compensation offered will take into account internal equity and may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors* **Benefits:** Coverage for employees (and their eligible dependents) through affordable access to healthcare, protection, and saving for the future, we offer plans tailored to meet you and your family’s needs. Coverage for benefits will be in accordance with the terms and conditions of the applicable plans and associated governing plan documents. **Wellbeing:** We offer events, resources, and learning opportunities that inspire a physical, social, emotional, and financial well-being lifestyle for our employees and their families. You’ll be able to participate in a variety of benefits and wellbeing programs that may vary by role, country, region, union status, and other employment status factors, for example: - Physical - Medical, Prescription Drug, Dental, Vision, Screenings/Assessments - Social - Paid Time Off, Company Holidays, Leave of Absence, Flexible Work Arrangements, Recognition, Training - Emotional – Employee Assistance Program , Wellbeing Programs, Family Support Programs - Financial – 401k, Life, Accidental Death & Dismemberment, Disability **Location(s)** Chicago/Aon Center **Kraft Heinz is an Equal Opportunity Employer – Underrepresented Ethnic Minority Groups/Women/Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity and other protected classes. In order to ensure reasonable accommodation for protected individuals, applicants that require accommodation in the job application process may contact** [NAZTAOps@kraftheinz.com](mailto:NAZTAOps@kraftheinz.com) **for assistance.**