Associate Manager, IT – Governance, Risk & Compliance

The Kraft Heinz Company

. Manage and monitor the central GRC and security mailbox as the first line of response for employee inquiries .

Posted 10/13/2026full-timeChicago • Illinois • United StatesMid-Level💰 $89,800 - $112,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security policy exception lifecycles, evaluating third-party risks, and conducting cyber controls maturity assessments. Proficient in communicating security concepts effectively to non-technical stakeholders while maintaining strong organizational skills and attention to detail.

Highest-signal resume keywords

Information Security ExperienceNIST CSF FamiliarityISO 27,001 KnowledgeVendor Risk ManagementSecurity Metrics Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Policy AdministrationRisk EvaluationException ManagementCyber Controls AssessmentVendor Security Documentation Review

Soft Skills

Exceptional Communication SkillsRelationship-BuildingOrganizational SkillsAttention to Detail

Industry Keywords

SOC 2 Type 2GDPRData ProtectionInformation Security Clauses

About the role

Key responsibilities & impact

Manage and monitor the central GRC and security mailbox as the first line of response for employee inquiries
Administer the security policy exception lifecycle from initial request through approval, extension, or remediation
Review exception requests and evaluate business justification against potential security risks
Maintain the centralized security exceptions register and track expiration dates
Initiate review processes before security exceptions lapse
Review vendor security documentation, including SOC 2 Type 2 reports, ISO 27,001 certificates, penetration test summaries, and custom security questionnaires
Identify, document, and communicate third-party risks to business owners
Track vendor remediation efforts for identified control gaps
Collaborate with procurement and legal teams to embed data protection and information security clauses in vendor contracts
Initiate, conduct, and manage cyber controls maturity assessments
Manage the security metrics program

Requirements

What you’ll need

4+ years of relevant information security experience
Familiarity with foundational security frameworks and regulations, including NIST CSF, ISO 27,001, and GDPR
Exceptional written and verbal communication skills
Ability to translate security concepts into simple, actionable guidance for non-technical employees
Strong organizational skills and high attention to detail
Demonstrable relationship-building skills with the business
Willingness to learn

Benefits

Comp & perks

Medical, prescription drug, dental, and vision coverage
7% 401(k) matching
Business Resource Groups (BRGs)
Industry-leading total rewards package
High discretionary performance-based bonus
Healthcare, protection, and savings plans for employees and eligible dependents
Paid Time Off
Company Holidays
Leave of Absence
Flexible Work Arrangements
Recognition
Training
Employee Assistance Program
Wellbeing Programs
Family Support Programs
Life insurance
Accidental Death & Dismemberment coverage
Disability coverage
Physical, social, emotional, and financial wellbeing events, resources, and learning opportunities
Benefits begin immediately upon hire for salaried employees