Information Security GRC Analyst

About the role

Information Security GRC Analyst reporting to the Manager of Information Security at Conagra Brands in Omaha (hybrid, 3 days in office). Supports third-party risk management, security policy and standards (ISO 27001/27002, NIST 800-53), risk assessments and treatment plans, control validation, risk exceptions, and audit liaison. 3+ years of IT security or GRC experience preferred.

Requirements

• Bachelor's degree in Security, Computer Science, MIS, IT, or related field preferred
• 3+ years of experience in IT with a focus in a security function or relevant GRC experience preferred
• Strong verbal and written communication skills
• Proven experience in risk assessment and mitigation
• Familiarity with cybersecurity frameworks such as ISO 27001/27002 or NIST 800-53
• Skilled in communicating complex technical concepts to varied audiences
• Willingness to travel up to 10%
• 3 days per week in office

What you'll do

• Support third-party risk management program by collecting and reviewing risk artifacts and assessments
• Develop and implement information security policies, standards and procedures
• Maintain and enforce policies aligned to ISO 27001/27002 and NIST 800-53
• Create, track and report GRC program and cybersecurity posture metrics
• Conduct risk assessments, assign risk rankings, oversee risk treatment plans
• Validate control compliance
• Manage cybersecurity risk exceptions and waivers
• Serve as liaison for internal and external audit and assessment engagements

Where this was posted

• Hiring Cafe

  last seen 3h ago
  View on Hiring Cafe