Information Security GRC Analyst

ConAgra Foods•Omaha, NE

8d•Hybrid

About The Position

Reporting to the Manager of Information Security, the Information Security GRC Analyst supports the integrity and safety of information across Conagra by advancing Governance, Risk and Compliance programs. The role works across departments to implement security best practices, maintain cybersecurity standards, and ensure risk management processes are robust, scalable, and aligned with industry frameworks.

Requirements

Strong verbal and written communication skills.
Proven experience in risk assessment and mitigation.
Familiarity with cybersecurity frameworks such as ISO 27001/27002 or NIST 800-53.
Ability to communicate complex technical concepts to audiences with varying levels of technical understanding.
Willingness to travel up to 10%.

Nice To Haves

Bachelor's degree in Security, Computer Science, Management Information Systems, Information Technology, or a related field preferred.
3+ years of Information Technology experience focused in a security function, or relevant Governance, Risk and Compliance experience preferred.

Responsibilities

Support the third-party risk management program by collecting and reviewing risk-related artifacts and assessments.
Develop and implement policies, standards, and procedures to protect enterprise information.
Maintain and enforce enterprise information security policies aligned with frameworks such as ISO 27001/27002 and NIST 800-53.
Create, track, and report metrics that monitor the health of the GRC program and Conagra's cybersecurity posture.
Assist in implementing and improving compliance and risk management programs and processes.
Conduct risk assessments, assign risk rankings, and oversee risk treatment plans.
Validate control compliance and alignment with enterprise cybersecurity protocols.
Manage and coordinate cybersecurity risk exceptions and waivers.
Serve as a liaison for internal and external cybersecurity GRC audit and assessment engagements.
Stay current on GRC best practices and emerging trends to continuously improve program effectiveness.