Information Security GRC Analyst

Conagra Brands•Omaha, NE

1d•$73,600 - $109,300•Hybrid

About The Position

Reporting to the Manager of Information Security, you will support the integrity and safety of information across Conagra by driving excellence in our Governance, Risk and Compliance programs. You will collaborate across departments to implement best practices, maintain cybersecurity standards, and ensure our risk management processes are robust, scalable, and aligned with industry frameworks.

Requirements

Bachelor's degree in Security, Computer Science, Management Information Systems, Information Technology, or a related field preferred.
3+ years of experience in Information Technology with a focus in a security function or relevant Governance, Risk and Compliance experience preferred.
Strong verbal and written communication skills.
Proven experience in risk assessment and mitigation.
Familiarity with cybersecurity frameworks such as ISO 27001/27002 or NIST 800-53.
Skilled in communicating complex technical concepts to audiences with varying levels of technical understanding.
Willingness to travel up to 10%.

Responsibilities

Support the third-party risk management program by collecting and reviewing risk-related artifacts and assessments.
Develop and implement policies, standards, and procedures to ensure the integrity and safety of enterprise information.
Maintain and enforce enterprise information security policies in alignment with cybersecurity frameworks such as ISO 27001/27002 and NIST 800-53.
Create, track, and report on metrics that monitor the health of the Governance, Risk and Compliance program and Conagra's cybersecurity posture.
Assist in implementing and improving compliance and risk management programs and processes.
Conduct risk assessments, assign risk rankings, and oversee risk treatment plans.
Validate control compliance and ensure alignment with enterprise cybersecurity protocols.
Manage and coordinate cybersecurity risk exceptions and waivers.
Serve as a liaison for internal and external audit and assessment engagements related to cybersecurity Governance, Risk and Compliance.
Stay current on Governance, Risk and Compliance best practices and emerging trends to continuously improve program effectiveness.