Associate Manager, IT - Governance, Risk & Compliance

The Kraft Heinz Company•Chicago, IL

1d•$89,800 - $112,200•Onsite

About The Position

This role plays a critical part in strengthening and maintaining the organization's security posture. The Associate Manager, IT - Governance, Risk & Compliance will be responsible for managing the life cycle of security policy exceptions, assisting with third-party security risk assessments, continuous control maturity assessments, and managing the security metrics program.

Requirements

4+ years of relevant information security experience.
Familiarity with Foundational security frameworks and regulations (e.g., NIST CSF, ISO 27,001 and GDPR).
Exceptional written and verbal communication skills with the ability to translate security concepts into simple and actionable guidance for non-technical employees.
Strong organizational skills and high attention to detail.
Demonstrable skills in building relationships with the business and a willingness to learn.

Responsibilities

Manage and monitor the central GRC and security mailbox, acting as the first line of response for employee inquiries.
Administer the security policy exception lifecycle from initial request to final approval, extension, or remediation.
Review incoming exception requests to evaluate business justification against potential security risks.
Maintain the centralised security exceptions register, proactively tracking expiration dates and initiating review processes before the exceptions lapse.
Conduct reviews of vendor security documentation, including SOC 2 type 2 reports, ISO 27,001 certificates, penetration test summaries, and custom security questionnaires.
Identify, document, and communicate third party risks to business owners, and track vendor remediation efforts for any identified control gaps.
Collaborate with procurement and legal teams to ensure appropriate data protection and information security clauses are embedded in vendor contracts.
Initiate, conduct and manage cyber controls maturity assessments.

Benefits

Medical coverage
Dental coverage
Vision coverage
7% 401(k) matching
Business Resource Groups (BRGs)
Industry-leading total rewards package
High discretionary bonus
Affordable access to healthcare
Protection and saving for the future plans
Events, resources, and learning opportunities for physical, social, emotional, and financial well-being
Paid Time Off
Company Holidays
Leave of Absence
Flexible Work Arrangements
Recognition
Training
Employee Assistance Program
Wellbeing Programs
Family Support Programs
Life insurance
Accidental Death & Dismemberment insurance
Disability insurance