The Kraft Heinz Company este o companie globală din domeniul alimentelor și băuturilor, cu un portofoliu larg de mărci de consum cunoscute. Produsele sale acoperă momentele obișnuite ale consumului zilnic, deservind clienții acasă, în restaurante și în deplasare. Compania activează pe piețele B2C, de alimente și băuturi și de retail, având o forță de muncă internațională numeroasă, concentrată pe conturarea viitorului alimentației.
Associate Manager, IT Governance, Risk and Compliance
Lead IT security governance and compliance work at Kraft Heinz, including security exceptions, vendor risk reviews, and cyber control maturity assessments. This full-time, hybrid role is based in Chicago.
Descriere
- Oversee the central GRC and security mailbox, responding to employee inquiries.
- Manage security policy exceptions from submission through approval, extension, or remediation.
- Assess exception requests by weighing business rationale against security risk.
- Maintain the security exception register and monitor expiration dates.
- Start reviews ahead of security exception expiration.
- Assess vendor security materials, including SOC 2 Type 2 reports, ISO 27001 certificates, penetration test summaries, and tailored security questionnaires.
- Document third-party risks and communicate them to business owners.
- Monitor vendor remediation of identified control gaps.
- Work with procurement and legal to include data protection and information security terms in vendor contracts.
- Launch and oversee cyber control maturity assessments.
- Run the security metrics program.
Cerințe
- At least four years of relevant information security experience.
- Familiarity with core security frameworks and regulations such as NIST CSF, ISO 27001, and GDPR.
- Excellent written and verbal communication skills.
- Ability to explain security concepts as clear, practical guidance for nontechnical employees.
- Strong organization and careful attention to detail.
- Ability to build productive relationships across the business.
- Willingness to learn.
Beneficii
- Medical, prescription drug, dental, and vision coverage.
- 401(k) match of 7%.
- Business Resource Groups.
- Comprehensive total rewards package.
- Discretionary, performance-based bonus with high potential.
- Healthcare, protection, and savings plans for employees and eligible dependents.
- Paid time off.
- Company holidays.
- Leave of absence.
- Flexible work arrangements.
- Employee recognition programs.
- Training opportunities.
- Employee Assistance Program.
- Wellbeing programs.
- Family support programs.
- Life insurance.
- Accidental death and dismemberment coverage.
- Disability coverage.
- Events, resources, and learning opportunities supporting physical, social, emotional, and financial wellbeing.
- Benefits begin immediately upon hire for salaried employees.