Manager, Cybersecurity Governance, Risk & Compliance (GRC)

Job Description:

The Manager Cybersecurity Governance Risk Compliance (GRC) ERP Security and IT Compliance is responsible for leading and advancing the organizations Cybersecurity GRC IT Compliance Third-Party Cybersecurity Risk Management Cybersecurity Awareness and ERP Security programs. This role provides strategic and operational leadership to a team of cybersecurity professionals focused on strengthening governance managing risk supporting regulatory compliance and enhancing the organizations overall cybersecurity maturity.

Partnering with leaders across Cybersecurity IT Internal Audit Legal Enterprise Risk Management Finance Human Resources Procurement and business the Manager drives programs that enable informed risk-based decision making strengthen security controls improve audit readiness and support the successful delivery of enterprise technology initiatives. This position plays a key role in evolving cybersecurity capabilities and ensuring security and compliance practices continue to scale with the needs of the business.

Key Responsibilities

Leadership & People Management

• Lead and develop a team responsible for Cybersecurity GRC IT Compliance Third-Party Risk Management ERP Security and Security Awareness.
• Establish team priorities performance goals and development plans aligned with business objectives.
• Foster a culture of accountability collaboration and continuous improvement.
• Manage resources budgets and strategic vendor relationships.

Cybersecurity Governance Risk Management & Reporting

• Lead and advance the organizations cybersecurity governance and risk management programs.
• Establish policies standards and governance practices aligned with regulatory requirements and industry frameworks.
• Drive enterprise cyber risk assessments mitigation planning and risk acceptance processes.
• Provide meaningful risk reporting metrics and insights that support executive decision-making.

Third-Party Cybersecurity Risk Management

• Lead the cybersecurity third-party risk management program.
• Oversee risk assessments of vendors suppliers cloud providers and business partners.
• Partner with Procurement Legal Privacy and business stakeholders to manage and mitigate third-party cybersecurity risks.

IT Compliance & Audit Management

• Lead and mature the organizations IT Compliance program including IT General Controls (ITGCs) and regulatory compliance activities.
• Coordinate internal and external audits including SOX ITGC and cybersecurity-related assessments.
• Ensure audit readiness through effective compliance testing remediation management evidence collection and reporting.

ERP Security & Access Governance

• Lead ERP security governance across SAP and other enterprise platforms.
• Oversee access governance segregation of duties privileged access controls and periodic access reviews.
• Partner with ERP Identity & Access Management (IAM) Internal Audit and business teams to strengthen security and compliance controls.
• Ensure cybersecurity and compliance requirements are embedded in ERP transformation and modernization initiatives.

Security Awareness Strategy & Program Excellence

• Lead the organizations cybersecurity awareness and education program to strengthen security culture and reduce organizational risk.
• Develop enterprise-wide awareness campaigns role-based training and targeted education initiatives.
• Establish strategic roadmaps success metrics and maturity goals across assigned programs.
• Drive continuous improvement through automation process optimization and technology enablement.
• Support cybersecurity strategic planning budget development and investment prioritization.

Required Qualifications

Education

• Bachelors degree in Cybersecurity Information Security Computer Science Information Technology or a related field.

Experience

• 8 years of experience in cybersecurity governance risk management compliance IT audit or related disciplines.
• 5 years of experience leading and developing teams in a cybersecurity or technology environment.
• Experience leading cybersecurity governance risk compliance audit or control programs within a large or complex organization.
• Experience partnering with business technology audit and risk stakeholders to drive cybersecurity and compliance initiatives.
• Experience developing executive-level reporting cybersecurity metrics and risk insights.
• Experience managing regulatory audit or control framework requirements including IT General Controls (ITGCs) SOX NIST or similar frameworks.

Preferred Qualifications

Certifications

One or more of the following certifications is preferred:

• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)

Additional Experience

• Experience with third-party cybersecurity risk management programs.
• Experience with SAP security ERP governance access management or segregation of duties controls.
• Experience supporting publicly traded or highly regulated organizations.
• Experience implementing or maturing cybersecurity governance risk management compliance or audit programs.
• Experience with cybersecurity governance risk compliance or audit management platforms and tools.

Compensation

The annual salary listed above is the expected offering for this position. An employees actual annual salary will be based on but not limited to: location relevant experience/level and skillset while balancing internal Conagra employees Brands will comply with applicable law regarding minimum salaries for exempt employees.

Our Benefits

We care about your total well-being and will support you with the following subject to your location and role:

• Health: Comprehensive healthcare plans wellness incentive program mental wellbeing support and fitness reimbursement

• Wealth: Great pay bonus incentive opportunity matching 401(k) and stock purchase plan

• Growth: Career development opportunities employee resource groups on-demand learning and tuition reimbursement

• Balance: Paid-time off parental leave flexible work-schedules (subject to your location and role) and volunteer opportunities

Our Company

At Conagra Brands we have a rich heritage of making great food. We aspire to have the most impactful energized and inclusive culture in food. As a member of our 18000 person team across 40 locations you are empowered to reach your potential make an impact and own your career. Were in the business of building champions within our people and our iconic brands like Birds Eye Slim Jim and Reddi-Wip.

Our focus on innovation extends beyond making great food it also reflects our commitment to embracing new solutions that positively impact our team the communities we serve and the health of our planet. Foodies Welcome.

Conagra Brands is an equal opportunity employer and considers qualified applicants for employment without regard to sex race color religion ethnic or national origin gender sexual orientation gender identity or expression age pregnancy leave status disability veteran status genetic information and/or any other characteristic or status protected by national federal state or local law. Reasonable accommodation may be made upon request.