IT GRC Associate Manager: Security, Risk & Compliance

Kraft Heinz; Chicago (IL); On-site; USD 90,000 - 112,000; Full time

Benefits offered by this job

7% 401(k) matching

BRGs for diversity and belonging

Comprehensive wellness benefits

Performance-based bonus

Job summary

Kraft Heinz is seeking an Associate Manager, IT - Governance, Risk & Compliance in Chicago. You will strengthen our security posture, manage policy exceptions, assess third-party risks, and oversee the security metrics program.

The role requires strong communication, stong organizational skills, and collaboration across procurement and legal. The team emphasizes a comprehensive total rewards package, with bonus eligibility and broad health benefits.

Qualifications

• 4+ years of information security experience.
• Familiar with NIST CSF, ISO 27001 and GDPR.
• Exceptional written and verbal communication skills.
• Strong organizational skills and high attention to detail.
• Demonstrated ability to build relationships with the business and a willingness to learn.

Responsibilities

• Manage central GRC and security mailbox as first line of response.
• Administer security policy exception lifecycle from request to approval/remediation.
• Review exception requests for business justification vs security risk.
• Maintain centralized security exceptions register; track expirations and reviews.
• Review vendor security documentation (SOC 2, ISO 27001, pen tests, questionnaires).
• Identify and communicate third-party risks; track remediation efforts.
• Collaborate with procurement and legal to embed data protection clauses in contracts.
• Initiate and manage cyber controls maturity assessments.

Skills

InfoSec experience

Security frameworks

Communication skills

Organization

Relationship building

Job description

Kraft Heinz is seeking an Associate Manager, IT - Governance, Risk & Compliance in Chicago. You will strengthen our security posture, manage policy exceptions, assess third-party risks, and oversee the security metrics program.

The role requires strong communication, stong organizational skills, and collaboration across procurement and legal. The team emphasizes a comprehensive total rewards package, with bonus eligibility and broad health benefits.