LogoFresh Jobs Ahead
The Kraft Heinz Company
The Kraft Heinz Company
B2CHrana in pijačaMaloprodaja
The Kraft Heinz Company je globalno podjetje na področju hrane in pijač s širokim portfeljem znanih potrošniških blagovnih znamk. Njegovi izdelki pokrivajo vsakodnevne priložnosti za uživanje hrane ter nagovarjajo stranke doma, v restavracijah in na poti. Podjetje deluje na trgih B2C, na področju hrane in pijač ter v maloprodaji, njegova velika mednarodna delovna sila pa je osredotočena na oblikovanje prihodnosti prehrane.
LinkedIn
Delovna mesta v podjetju

Associate Manager, IT Governance, Risk and Compliance

Lead IT security governance and compliance work at Kraft Heinz, including security exceptions, vendor risk reviews, and cyber control maturity assessments. This full-time, hybrid role is based in Chicago.

USZdružene države AmerikeILIllinois
89.800 $ – 112.200 $ / leto
HibridnoPolni delovni časSrednja ravenZahtevani Jezik: angleščinaSkladnost

Opis

  • Oversee the central GRC and security mailbox, responding to employee inquiries.
  • Manage security policy exceptions from submission through approval, extension, or remediation.
  • Assess exception requests by weighing business rationale against security risk.
  • Maintain the security exception register and monitor expiration dates.
  • Start reviews ahead of security exception expiration.
  • Assess vendor security materials, including SOC 2 Type 2 reports, ISO 27001 certificates, penetration test summaries, and tailored security questionnaires.
  • Document third-party risks and communicate them to business owners.
  • Monitor vendor remediation of identified control gaps.
  • Work with procurement and legal to include data protection and information security terms in vendor contracts.
  • Launch and oversee cyber control maturity assessments.
  • Run the security metrics program.

Zahteve

  • At least four years of relevant information security experience.
  • Familiarity with core security frameworks and regulations such as NIST CSF, ISO 27001, and GDPR.
  • Excellent written and verbal communication skills.
  • Ability to explain security concepts as clear, practical guidance for nontechnical employees.
  • Strong organization and careful attention to detail.
  • Ability to build productive relationships across the business.
  • Willingness to learn.

Ugodnosti

  • Medical, prescription drug, dental, and vision coverage.
  • 401(k) match of 7%.
  • Business Resource Groups.
  • Comprehensive total rewards package.
  • Discretionary, performance-based bonus with high potential.
  • Healthcare, protection, and savings plans for employees and eligible dependents.
  • Paid time off.
  • Company holidays.
  • Leave of absence.
  • Flexible work arrangements.
  • Employee recognition programs.
  • Training opportunities.
  • Employee Assistance Program.
  • Wellbeing programs.
  • Family support programs.
  • Life insurance.
  • Accidental death and dismemberment coverage.
  • Disability coverage.
  • Events, resources, and learning opportunities supporting physical, social, emotional, and financial wellbeing.
  • Benefits begin immediately upon hire for salaried employees.