Associate Manager, IT - Governance, Risk & Compliance

You will play a critical role in strengthening and maintaining our organization’s security posture. You will be responsible for managing the life cycle of security policy exceptions, assisting with third-party security risk assessments and continuous control maturity assessments and manage the security metrics program., * Manage and monitor the central GRC and security mailbox, acting as the first line of response for employee inquiries.

• Administer the security policy exception lifecycle from initial request to final approval, extension, or remediation.
• Review incoming exception requests to evaluate business justification against potential security risks.
• Maintain the centralised security exceptions register, proactively tracking expiration dates and initiating review processes before the exceptions lapse.
• Conduct reviews of vendor security documentation, including SOC 2 type 2 reports, ISO 27,001 certificates, penetration test summaries, and custom security questionnaires.
• Identify, document, and communicate third party risks to business owners, and track vendor remediation efforts for any identified control gaps.
• Collaborate with procurement and legal teams to ensure appropriate data protection and information security clauses are embedded in vendor contracts.
• Initiate, conduct and manage cyber controls maturity assessments.

• I have 4+ years of relevant information security experience.
• I am familiar with Foundational security frameworks and regulations (e.g., NIST CSF, ISO 27,001 and GDPR).
• I have exceptional written and verbal communication skills with the ability to translate security concepts into simple and actionable guidance for non-technical employees.
• I have strong organizational skills and high attention to detail.
• I have demonstrable skills in building relationships with the business and a willingness to learn.

Our Total Rewards philosophy is to provide a meaningful and flexible spectrum of programs that equitably support our diverse workforce and their families and complement Kraft Heinz’ strategy and values.

New Hire Base Salary Range: $89,800.00 - $112,200.00

Bonus: This position is eligible for a performance-based bonus as provided by the plan terms and governing documents.

The compensation offered will take into account internal equity and may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors

Benefits: Coverage for employees (and their eligible dependents) through affordable access to healthcare, protection, and saving for the future, we offer plans tailored to meet you and your family’s needs. Coverage for benefits will be in accordance with the terms and conditions of the applicable plans and associated governing plan documents.

Wellbeing: We offer events, resources, and learning opportunities that inspire a physical, social, emotional, and financial well-being lifestyle for our employees and their families.

You’ll be able to participate in a variety of benefits and wellbeing programs that may vary by role, country, region, union status, and other employment status factors, for example:

• Physical - Medical, Prescription Drug, Dental, Vision, Screenings/Assessments
• Social - Paid Time Off, Company Holidays, Leave of Absence, Flexible Work Arrangements, Recognition, Training
• Emotional - Employee Assistance Program , Wellbeing Programs, Family Support Programs
• Financial - 401k, Life, Accidental Death & Dismemberment, Disability