Associate Manager, IT - Governance, Risk & Compliance

Kraft Heinz•Chicago, IL

1d•$89,800 - $112,200•Onsite

About The Position

Here at Kraft Heinz, we grow our people to grow our business, because we believe that great people make great companies. When you join our table, you can expect access to an array of holistic wellness benefits and perks, including medical, dental and vision coverage, 7% 401(k) matching, Business Resource Groups (BRGs) to help foster diversity, inclusion, and belonging for all employees, an industry-leading total rewards package that emphasizes a high discretionary bonus. Benefits begin immediately upon hire for salaried employees. Get a peek into life here at Kraft Heinz through our Instagram and TikTok channels! Associate Manager, IT - Governance, Risk & Compliance at a glance... You will play a critical role in strengthening and maintaining our organization's security posture. You will be responsible for managing the life cycle of security policy exceptions, assisting with third-party security risk assessments and continuous control maturity assessments and manage the security metrics program.

Requirements

4+ years of relevant information security experience.
Familiarity with Foundational security frameworks and regulations (e.g., NIST CSF, ISO 27,001 and GDPR).
Exceptional written and verbal communication skills with the ability to translate security concepts into simple and actionable guidance for non-technical employees.
Strong organizational skills and high attention to detail.
Demonstrable skills in building relationships with the business and a willingness to learn.

Responsibilities

Manage and monitor the central GRC and security mailbox, acting as the first line of response for employee inquiries.
Administer the security policy exception lifecycle from initial request to final approval, extension, or remediation.
Review incoming exception requests to evaluate business justification against potential security risks.
Maintain the centralised security exceptions register, proactively tracking expiration dates and initiating review processes before the exceptions lapse.
Conduct reviews of vendor security documentation, including SOC 2 type 2 reports, ISO 27,001 certificates, penetration test summaries, and custom security questionnaires.
Identify, document, and communicate third party risks to business owners, and track vendor remediation efforts for any identified control gaps.
Collaborate with procurement and legal teams to ensure appropriate data protection and information security clauses are embedded in vendor contracts.
Initiate, conduct and manage cyber controls maturity assessments.

Benefits

medical, dental and vision coverage
7% 401(k) matching
Business Resource Groups (BRGs)
high discretionary bonus
Coverage for employees (and their eligible dependents) through affordable access to healthcare, protection, and saving for the future
events, resources, and learning opportunities that inspire a physical, social, emotional, and financial well-being lifestyle
Medical, Prescription Drug, Dental, Vision, Screenings/Assessments
Paid Time Off, Company Holidays, Leave of Absence, Flexible Work Arrangements, Recognition, Training
Employee Assistance Program, Wellbeing Programs, Family Support Programs
401k, Life, Accidental Death & Dismemberment, Disability