> Markdown version of [/jobs/ext/3759170-information-security-grc-analyst](https://www.wearedevelopers.com/jobs/ext/3759170-information-security-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security GRC Analyst

- **Company:** Conagra Brands
- **Location:** Omaha, NE, United States
- **Experience:** Experienced
- **Salary:** $73,600.0 - $109,300.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Technology
- **Published:** October 15, 2026
- **Apply:** https://conagrabrands.wd1.myworkdayjobs.com/Careers_US/job/Omaha-Nebraska/Information-Security-GRC-Analyst_Req-040783-1

## About the Role

* Bachelor's degree in Security, Computer Science, Management Information Systems, Information Technology, or a related field preferred.
 * 3+ years of experience in Information Technology with a focus in a security function or relevant Governance, Risk and Compliance experience preferred.
 * Strong verbal and written communication skills.
 * Proven experience in risk assessment and mitigation.
 * Familiarity with cybersecurity frameworks such as ISO 27001/27002 or NIST 800-53.
 * Skilled in communicating complex technical concepts to audiences with varying levels of technical understanding.
 * Willingness to travel up to 10%.

## Description

* Support the third-party risk management program by collecting and reviewing risk-related artifacts and assessments.
 * Develop and implement policies, standards, and procedures to ensure the integrity and safety of enterprise information.
 * Maintain and enforce enterprise information security policies in alignment with cybersecurity frameworks such as ISO 27001/27002 and NIST 800-53.
 * Create, track, and report on metrics that monitor the health of the Governance, Risk and Compliance program and Conagra's cybersecurity posture.
 * Assist in implementing and improving compliance and risk management programs and processes.
 * Conduct risk assessments, assign risk rankings, and oversee risk treatment plans.
 * Validate control compliance and ensure alignment with enterprise cybersecurity protocols.
 * Manage and coordinate cybersecurity risk exceptions and waivers.
 * Serve as a liaison for internal and external audit and assessment engagements related to cybersecurity Governance, Risk and Compliance.
 * Stay current on Governance, Risk and Compliance best practices and emerging trends to continuously improve program effectiveness.