Associate Manager, IT - Governance, Risk & Compliance

Kraft Heinz; Chicago (IL); On-site; USD 90,000 - 112,000; Full time

Benefits offered by this job

7% 401(k) matching

BRGs for diversity and belonging

Comprehensive wellness benefits

Performance-based bonus

Job summary

Kraft Heinz is seeking an Associate Manager, IT - Governance, Risk & Compliance in Chicago. You will strengthen our security posture, manage policy exceptions, assess third-party risks, and oversee the security metrics program.

The role requires strong communication, stong organizational skills, and collaboration across procurement and legal. The team emphasizes a comprehensive total rewards package, with bonus eligibility and broad health benefits.

Qualifications

• 4+ years of information security experience.
• Familiar with NIST CSF, ISO 27001 and GDPR.
• Exceptional written and verbal communication skills.
• Strong organizational skills and high attention to detail.
• Demonstrated ability to build relationships with the business and a willingness to learn.

Responsibilities

• Manage central GRC and security mailbox as first line of response.
• Administer security policy exception lifecycle from request to approval/remediation.
• Review exception requests for business justification vs security risk.
• Maintain centralized security exceptions register; track expirations and reviews.
• Review vendor security documentation (SOC 2, ISO 27001, pen tests, questionnaires).
• Identify and communicate third-party risks; track remediation efforts.
• Collaborate with procurement and legal to embed data protection clauses in contracts.
• Initiate and manage cyber controls maturity assessments.

Skills

InfoSec experience

Security frameworks

Communication skills

Organization

Relationship building

Job description

Job Description

Here at Kraft Heinz, we grow our people to grow our business, because we believe that great people make great companies. When you join our table, you can expect access to an array of holistic wellness benefits* and perks, including medical, dental and vision coverage, 7% 401(k) matching, Business Resource Groups (BRGs) to help foster diversity, inclusion, and belonging for all employees, an industry-leading total rewards package that emphasizes a high discretionary bonus.

• Benefits begin immediately upon hire for salaried employees.

Associate Manager, IT - Governance, Risk & Compliance at a glance

Get a peek into life here at Kraft Heinz through our Instagram and TikTok channels!

You will play a critical role in strengthening and maintaining our organization's security posture. You will be responsible for managing the life cycle of security policy exceptions, assisting with third-party security risk assessments and continuous control maturity assessments and manage the security metrics program.

What's on the menu?

• Manage and monitor the central GRC and security mailbox, acting as the first line of response for employee inquiries.
• Administer the security policy exception lifecycle from initial request to final approval, extension, or remediation.
• Review incoming exception requests to evaluate business justification against potential security risks.
• Maintain the centralised security exceptions register, proactively tracking expiration dates and initiating review processes before the exceptions lapse.
• Conduct reviews of vendor security documentation, including SOC 2 type 2 reports, ISO 27,001 certificates, penetration test summaries, and custom security questionnaires.
• Identify, document, and communicate third party risks to business owners, and track vendor remediation efforts for any identified control gaps.
• Collaborate with procurement and legal teams to ensure appropriate data protection and information security clauses are embedded in vendor contracts.
• Initiate, conduct and manage cyber controls maturity assessments.

• I have 4+ years of relevant information security experience.
• I am familiar with Foundational security frameworks and regulations (e.g., NIST CSF, ISO 27,001 and GDPR).
• I have exceptional written and verbal communication skills with the ability to translate security concepts into simple and actionable guidance for non-technical employees.
• I have strong organizational skills and high attention to detail.
• I have demonstrable skills in building relationships with the business and a willingness to learn.

Please note: This job posting is just a preview of the full scope of the position. A comprehensive job description will be shared.

We hope to find you a seat at our table!

Our Total Rewards philosophy is to provide a meaningful and flexible spectrum of programs that equitably support our diverse workforce and their families and complement Kraft Heinz' strategy and values.

New Hire Base Salary Range

$89,800.00 - $112,200.00

Bonus: This position is eligible for a performance-based bonus as provided by the plan terms and governing documents.

The compensation offered will take into account internal equity and may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors

Coverage for employees (and their eligible dependents) through affordable access to healthcare, protection, and saving for the future, we offer plans tailored to meet you and your family’s needs. Coverage for benefits will be in accordance with the terms and conditions of the applicable plans and associated governing plan documents.

Wellbeing: We offer events, resources, and learning opportunities that inspire a physical, social, emotional, and financial well-being lifestyle for our employees and their families.

Benefits

• Physical - Medical, Prescription Drug, Dental, Vision, Screenings/Assessments
• Social - Paid Time Off, Company Holidays, Leave of Absence, Flexible Work Arrangements, Recognition, Training
• Emotional - Employee Assistance Program , Wellbeing Programs, Family Support Programs
• Financial - 401k, Life, Accidental Death & Dismemberment, Disability

Location(s)

Chicago/Aon Center

Kraft Heinz is an Equal Opportunity Employer – Underrepresented Ethnic Minority Groups/Women/Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity and other protected classes. In order to ensure reasonable accommodation for protected individuals, applicants that require accommodation in the job application process may contact [e-mail] for assistance.