Manager, Cybersecurity Governance, Risk & Compliance (GRC)

Job Description:

The Manager, Cybersecurity Governance, Risk, Compliance (GRC), ERP Security, and IT Compliance is responsible for leading and advancing the organization's Cybersecurity GRC, IT Compliance, Third-Party Cybersecurity Risk Management, Cybersecurity Awareness, and ERP Security programs. This role provides strategic and operational leadership to a team of cybersecurity professionals focused on strengthening governance, managing risk, supporting regulatory compliance, and enhancing the organization's overall cybersecurity maturity.

Partnering with leaders across Cybersecurity, IT, Internal Audit, Legal, Enterprise Risk Management, Finance, Human Resources, Procurement, and business, the Manager drives programs that enable informed risk-based decision making, strengthen security controls, improve audit readiness, and support the successful delivery of enterprise technology initiatives. This position plays a key role in evolving cybersecurity capabilities and ensuring security and compliance practices continue to scale with the needs of the business.

Key Responsibilities

Leadership & People Management

• Lead and develop a team responsible for Cybersecurity GRC, IT Compliance, Third-Party Risk Management, ERP Security, and Security Awareness.
• Establish team priorities, performance goals, and development plans aligned with business objectives.
• Foster a culture of accountability, collaboration, and continuous improvement.
• Manage resources, budgets, and strategic vendor relationships.

Cybersecurity Governance, Risk Management & Reporting

• Lead and advance the organization's cybersecurity governance and risk management programs.
• Establish policies, standards, and governance practices aligned with regulatory requirements and industry frameworks.
• Drive enterprise cyber risk assessments, mitigation planning, and risk acceptance processes.
• Provide meaningful risk reporting, metrics, and insights that support executive decision-making.

Third-Party Cybersecurity Risk Management

• Lead the cybersecurity third-party risk management program.
• Oversee risk assessments of vendors, suppliers, cloud providers, and business partners.
• Partner with Procurement, Legal, Privacy, and business stakeholders to manage and mitigate third-party cybersecurity risks.

IT Compliance & Audit Management

• Lead and mature the organization's IT Compliance program, including IT General Controls (ITGCs) and regulatory compliance activities.
• Coordinate internal and external audits, including SOX ITGC and cybersecurity-related assessments.
• Ensure audit readiness through effective compliance testing, remediation management, evidence collection, and reporting.

ERP Security & Access Governance

• Lead ERP security governance across SAP and other enterprise platforms.
• Oversee access governance, segregation of duties, privileged access controls, and periodic access reviews.
• Partner with ERP, Identity & Access Management (IAM), Internal Audit, and business teams to strengthen security and compliance controls.
• Ensure cybersecurity and compliance requirements are embedded in ERP transformation and modernization initiatives.

Security Awareness, Strategy & Program Excellence

• Lead the organization's cybersecurity awareness and education program to strengthen security culture and reduce organizational risk.
• Develop enterprise-wide awareness campaigns, role-based training, and targeted education initiatives.
• Establish strategic roadmaps, success metrics, and maturity goals across assigned programs.
• Drive continuous improvement through automation, process optimization, and technology enablement.
• Support cybersecurity strategic planning, budget development, and investment prioritization.

Required Qualifications

Education

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.

Experience

• 8+ years of experience in cybersecurity, governance, risk management, compliance, IT audit, or related disciplines.
• 5+ years of experience leading and developing teams in a cybersecurity or technology environment.
• Experience leading cybersecurity governance, risk, compliance, audit, or control programs within a large or complex organization.
• Experience partnering with business, technology, audit, and risk stakeholders to drive cybersecurity and compliance initiatives.
• Experience developing executive-level reporting, cybersecurity metrics, and risk insights.
• Experience managing regulatory, audit, or control framework requirements, including IT General Controls (ITGCs), SOX, NIST, or similar frameworks.

Preferred Qualifications

Certifications

One or more of the following certifications is preferred:

• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)

Additional Experience

• Experience with third-party cybersecurity risk management programs.
• Experience with SAP security, ERP governance, access management, or segregation of duties controls.
• Experience supporting publicly traded or highly regulated organizations.
• Experience implementing or maturing cybersecurity governance, risk management, compliance, or audit programs.
• Experience with cybersecurity governance, risk, compliance, or audit management platforms and tools.

Compensation 

The annual salary listed above is the expected offering for this position. An employee’s actual annual salary will be based on but not limited to: location, relevant experience/level and skillset, while balancing internal Conagra employees’ equity. Conagra Brands will comply with applicable law regarding minimum salaries for exempt employees.

Our Benefits

We care about your total well-being and will support you with the following, subject to your location and role:

• Health: Comprehensive healthcare plans, wellness incentive program, mental wellbeing support and fitness reimbursement

• Wealth: Great pay, bonus incentive opportunity, matching 401(k) and stock purchase plan

• Growth: Career development opportunities, employee resource groups, on-demand learning and tuition reimbursement

• Balance: Paid-time off, parental leave, flexible work-schedules (subject to your location and role) and volunteer opportunities

Our Company

At Conagra Brands, we have a rich heritage of making great food. We aspire to have the most impactful, energized and inclusive culture in food. As a member of our 18,000+ person team across 40+ locations, you are empowered to reach your potential, make an impact and own your career. We're in the business of building champions – within our people and our iconic brands like Birds Eye®, Slim Jim® and Reddi-Wip®.

Our focus on innovation extends beyond making great food, it also reflects our commitment to embracing new solutions that positively impact our team, the communities we serve and the health of our planet. Foodies Welcome.

Conagra Brands is an equal opportunity employer and considers qualified applicants for employment without regard to sex, race, color, religion, ethnic or national origin, gender, sexual orientation, gender identity or expression, age, pregnancy, leave status, disability, veteran status, genetic information and/or any other characteristic or status protected by national, federal, state or local law. Reasonable accommodation may be made upon request.