The Kraft Heinz Company taniqli iste’molchi brendlaridan iborat keng portfelga ega global oziq-ovqat va ichimliklar kompaniyasidir. Uning mahsulotlari uyda, restoranlarda va yo‘lda iste’mol qilinadigan kundalik taomlanish ehtiyojlarini qamrab oladi. Kompaniya iste’mol tovarlari, oziq-ovqat va ichimliklar hamda chakana savdo bozorlarida faoliyat yuritadi va oziq-ovqat sanoatining kelajagini shakllantirishga e’tibor qaratadigan yirik xalqaro jamoaga ega.
Associate Manager, IT Governance, Risk and Compliance
Lead IT security governance and compliance work at Kraft Heinz, including security exceptions, vendor risk reviews, and cyber control maturity assessments. This full-time, hybrid role is based in Chicago.
Tavsif
- Oversee the central GRC and security mailbox, responding to employee inquiries.
- Manage security policy exceptions from submission through approval, extension, or remediation.
- Assess exception requests by weighing business rationale against security risk.
- Maintain the security exception register and monitor expiration dates.
- Start reviews ahead of security exception expiration.
- Assess vendor security materials, including SOC 2 Type 2 reports, ISO 27001 certificates, penetration test summaries, and tailored security questionnaires.
- Document third-party risks and communicate them to business owners.
- Monitor vendor remediation of identified control gaps.
- Work with procurement and legal to include data protection and information security terms in vendor contracts.
- Launch and oversee cyber control maturity assessments.
- Run the security metrics program.
Talablar
- At least four years of relevant information security experience.
- Familiarity with core security frameworks and regulations such as NIST CSF, ISO 27001, and GDPR.
- Excellent written and verbal communication skills.
- Ability to explain security concepts as clear, practical guidance for nontechnical employees.
- Strong organization and careful attention to detail.
- Ability to build productive relationships across the business.
- Willingness to learn.
Imtiyozlar
- Medical, prescription drug, dental, and vision coverage.
- 401(k) match of 7%.
- Business Resource Groups.
- Comprehensive total rewards package.
- Discretionary, performance-based bonus with high potential.
- Healthcare, protection, and savings plans for employees and eligible dependents.
- Paid time off.
- Company holidays.
- Leave of absence.
- Flexible work arrangements.
- Employee recognition programs.
- Training opportunities.
- Employee Assistance Program.
- Wellbeing programs.
- Family support programs.
- Life insurance.
- Accidental death and dismemberment coverage.
- Disability coverage.
- Events, resources, and learning opportunities supporting physical, social, emotional, and financial wellbeing.
- Benefits begin immediately upon hire for salaried employees.