Cybersecurity GRC Analyst – Third-Party Risk

Reporting to the Manager of Information Security, you will support Conagra's Governance, Risk and Compliance program with a primary focus on Third-Party Risk Management (TPRM). You will assess cybersecurity risks associated with third-party vendors and service providers, review security and compliance documentation, identify and communicate risk, and partner with internal stakeholders to support appropriate risk treatment and remediation. You will also contribute to broader GRC initiatives, including risk assessments, security controls, policies, compliance, and audit activities.

A Taste of Your Responsibilities

• Conduct cybersecurity risk assessments of third-party vendors and service providers, identifying risks and assigning appropriate risk ratings.

• Review third-party security documentation and evidence, including security assessments, SOC reports, certifications, policies, and other risk-related artifacts.

• Partner with business owners, technology teams, Procurement, Legal, and third parties to evaluate identified risks and support remediation and risk treatment plans.

• Track third-party cybersecurity risks, findings, remediation activities, and exceptions through resolution.

• Support and continuously improve the Third-Party Risk Management program, including assessment processes, documentation, reporting, and risk-based decision making.

• Conduct broader cybersecurity risk assessments and support risk treatment activities across the organization.

• Develop, maintain, and support enterprise information security policies, standards, and procedures aligned with cybersecurity frameworks such as ISO 27001/27002 and NIST 800-53.

• Validate control compliance and coordinate cybersecurity risk exceptions and waivers.

• Create, track, and report metrics related to third-party risk and the overall health of the Governance, Risk and Compliance program.

• Serve as a liaison for internal and external cybersecurity audit and assessment activities.

• Stay current on third-party risk, Governance, Risk and Compliance, and cybersecurity best practices and emerging risks to continuously improve program effectiveness.

• Ingredients Required for Your Success
• Bachelor's degree in Security, Computer Science, Management Information Systems, Information Technology, or a related field preferred.

• 3+ years of experience in Information Technology, Information Security, Governance, Risk and Compliance, or a related field preferred.

• Experience conducting third-party or vendor cybersecurity risk assessments and reviewing security documentation and controls.

• Experience identifying, documenting, communicating, and tracking cybersecurity risks and remediation activities.

• Proven experience conducting risk assessments and supporting risk mitigation or treatment activities.

• Familiarity with cybersecurity frameworks such as ISO 27001/27002 or NIST 800-53.

• Ability to evaluate third-party security posture and communicate risk-based findings and recommendations to technical and non-technical stakeholders.

• Strong verbal and written communication skills.

• Willingness to travel up to 10%.

 
Number of Days in Office: 3

#LI-Hybrid 
#LI-SG1 
#LI-Associate

#LI-Associate

Compensation 

The annual salary listed above is the expected offering for this position. An employee’s actual annual salary will be based on but not limited to: location, relevant experience/level and skillset, while balancing internal Conagra employees’ equity. Conagra Brands will comply with applicable law regarding minimum salaries for exempt employees.

Our Benefits

We care about your total well-being and will support you with the following, subject to your location and role:

• Health: Comprehensive healthcare plans, wellness incentive program, mental wellbeing support and fitness reimbursement

• Wealth: Great pay, bonus incentive opportunity, matching 401(k) and stock purchase plan

• Growth: Career development opportunities, employee resource groups, on-demand learning and tuition reimbursement

• Balance: Paid-time off, parental leave, flexible work-schedules (subject to your location and role) and volunteer opportunities

Our Company

At Conagra Brands, we have a rich heritage of making great food. We aspire to have the most impactful, energized and inclusive culture in food. As a member of our 18,000+ person team across 40+ locations, you are empowered to reach your potential, make an impact and own your career. We're in the business of building champions – within our people and our iconic brands like Birds Eye®, Slim Jim® and Reddi-Wip®.

Our focus on innovation extends beyond making great food, it also reflects our commitment to embracing new solutions that positively impact our team, the communities we serve and the health of our planet. Foodies Welcome.

Conagra Brands is an equal opportunity employer and considers qualified applicants for employment without regard to sex, race, color, religion, ethnic or national origin, gender, sexual orientation, gender identity or expression, age, pregnancy, leave status, disability, veteran status, genetic information and/or any other characteristic or status protected by national, federal, state or local law. Reasonable accommodation may be made upon request.