Experience Inc. Jobs

Job Information

US Foods Identity Access Management Controls, Sr Manager (Remote) in Rosemont, Illinois

ARE YOU A CURRENT US FOODS EMPLOYEE? PLEASE APPLY DIRECTLY THROUGH OUR INTERNAL WORKDAY CAREER SITE.

Join Our Community of Food People!

The IAM Controls Sr Manager is responsible for ensuring US Foods compliance with applicable regulatory requirements in its Identity and Access Management solution. These responsibilities include assessing processes and technologies and internal controls for regulatory compliance, anticipating interests of audit teams (both internal and external audit), proactively identifying compliance gaps and issues. Additionally, the position is responsible for identifying and assisting in documenting identity and access controls, implementing, and documenting new internal controls, and establishing an internal monitoring function to audit compliance with such internal controls. The position will have a key role in assessing the IT General Controls requirements of the Sarbanes-Oxley Act of 2002. Finally, this role will take a continuous improvement approach to US Foods’ compliance efforts that includes developing an ongoing program that assesses, reports on, develops, and improves the company’s key operational and internal controls in the identity and access management environment.

Flexible Work Policy: The work for the IAM Controls Sr Mgr position is completely 100% remote anywhere in the United States except Hawaii or United States Territories. This position may have the potential to travel up to 20% dependent on business needs.

RESPONSIBILITIES

  • Conduct comprehensive reviews and assessments of IAM controls, policies, and procedures to identify gaps, weaknesses, and areas for improvement

  • Review documented identity and access process flows, policies, and controls to ensure appropriateness to meet or exceed regulatory requirements and internal controls.

  • Improve SOX documentation for IAM (i.e., work with process owners to refine risk control matrix, improve process flows, refine / develop test procedures, propose control language and associated risks etc.)

  • Develop and maintain IAM control frameworks, standards, and guidelines to support consistent implementation and enforcement of controls across the organization

  • Design, execute and complete testing of the design and operating effectiveness of SOX IT controls, including entity and process level controls, and IT general and application controls

  • Advise and collaborate on projects by providing IT controls expertise and considerations

  • Work with process owners on developing new controls to address business changes and new auditing and accounting standards

  • Provide expertise and guidance on IAM controls to stakeholders, including IT teams, management, and external auditors

  • Lead and guide the development and implementation of remediation plans to address identified IAM control deficiencies or non-compliance issues

  • Stay informed about emerging threats, vulnerabilities, and regulatory changes related to IAM controls and recommend proactive measures to enhance security posture

  • Advance the ongoing relationship between US Foods IAM team and Internal Audit function

  • Review and evaluate new processes, policies, and systems to determine relevance to and impact on the SOX program, including assessing design of controls based on identified risks

  • Aid external auditors as necessary

  • Communicates status of audit results to management

  • Lead end to end walkthroughs to find risks, control gaps, and improvement opportunities

  • Lead the validation of current state system processes

  • Serve as a liaison for the security team

  • Work with Internal Audit team to ensure that audit findings are resolved timely

RELATIONSHIPS

  • Internal : IT Compliance, IT subject matter experts,Internal Audit, Governance and Risk, Finance, Sales, Retail, Product Owners, Human Resources, Legal, and Security Engineering

  • External : This role will interact frequently with external auditors and IAM vendor partnerships

MINIMUM QUALIFICATIONS

  • 7 years’ experience in a Cybersecurity role or combined IT Audit and Cybersecurity roles with a focus in IAM, compliance, and/or general IT audit controls.

  • Demonstrable experience Knowledge of Sarbanes-Oxley general IT control areas

  • In-depth knowledge of IAM concepts, technologies, and best practices, including authentication, authorization, directory services, and access controls

  • Experience with IAM solutions such as Identity Governance and Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO), etc., is desirable

  • Excellent communication and presentation skills

  • Excellent judgment and the ability to make quick decisions when working in complex situations

  • High degree of integrity, trustworthiness, and confidence; represents the company and its management team with the highest level of professionalism

  • Organized, with the ability to prioritize and complete tasks

  • Ability to work in a fast-paced environment with changing processes and procedures

  • Displays an analytical and problem-solving mindset

  • Strong EXCEL skills

  • Self-starter and flexible team player

  • Strong project management abilities

  • Possesses general business administration competencies

  • Technical background and thorough understanding of security threats

  • Working knowledge of Windows, Linux, and Unix

Education

  • Bachelor’s degree in computer science, information assurance, MIS, or related field, or equivalent work experience

Certifications/Training

  • List any licenses or certifications desired by the position: CISA, CISM, SOX, CISSP, CIA, CAMS

PREFERRED QUALIFICATIONS

  • Controls at an infrastructure and application level, databases, and systems maintenance

  • Knowledge of and experience in utilizing various methodologies and frameworks, including, NIST, COBIT, COSO, ITIL

  • 5+ years of Information Security experience

  • Scripting or programming skills preferred

  • Experience in a highly heterogeneous diverse technology environment with a mix of modern, custom, SaaS, and on-premises systems.

  • Strong knowledge of risk assessment and familiarity with tools and techniques used to provide control and monitoring mechanisms

PHYSICAL QUALIFICATIONS

  • Standard required physical activities including length of time performing each activity.

The following information is provided in accordance with certain state and local laws. Compensation depends on experience, geographic locations, and other factors permitted by law.  In California, the expected compensation for this role is between $115,900 and $154,500.  In Connecticut, the expected compensation for this role is between $122,000 or 162,700. In Colorado, the expected compensation for this role is between $102,500 and $136,700. In Maryland, the expected compensation for this role is between $109,500 and $146,100.   In Minnesota, the expected compensation for this role is between $102,500 and $136,700.  In New York, the expected compensation for this role is between $122,000 or 162,700. In Rhode Island, the expected compensation for this role is between $109,500 and $146,100. In Washington, the expected compensation for this role is between $115,900 and $154,500.  This role is also eligible for annual incentive plan bonus.  Benefits for this role include health insurance, pre-tax spending accounts, retirement benefits, paid time off, short-term and long-term disability, employee stock purchase plan, and life insurance.  To review available benefits, please click here: https://www.usfoods.com/careers/benefits.html .  

#LI-SK1

#REMOTE

EOE* Race/Color/Religion/Sex/Sexual Orientation/Gender Identity/National Origin/Protected Veteran/Disability Status*

Puede ver este sitio de empleo y aplicación en español utilizando la configuración de su navegador o teléfono móvil. Haga clic a continuación para obtener más información.

Microsoft Edge (https://www.usfoods.com/content/dam/usf/pdf/Policies/HR/Microsoft_Edge_Spanish_Instructions.pdf)

Google Chrome

Safari

iPhone

Androide (https://www.usfoods.com/content/dam/usf/pdf/Policies/HR/Android_Spanish_Instructions.pdf)

US Foods is one of America’s great food companies and a leading foodservice distributor, partnering with approximately 300,000 restaurants and foodservice operators to help their businesses succeed. With 28,000 employees and more than 70 locations, US Foods provides its customers with a broad and innovative food offering and a comprehensive suite of e-commerce, technology and business solutions. US Foods is headquartered in Rosemont, Ill., and generates more than $28 billion in annual revenue. Visit www.usfoods.com to learn more.

US Foods may collect personal information from you in connection with the application process. US Foods complies with the California Privacy Rights Act of 2020, and its policy may be found here (https://www.usfoods.com/content/dam/usf/pdf/Policies/HR/USF_CCPA_policy.pdf) .

US Foods, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other basis prohibited by applicable law.

EEO is the Law poster is available here (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf) .

EEO is the Law poster supplement is available here (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf) .

Pay Transparency policy statement is available here (https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf) .

US Foods is committed to working with and providing reasonable accommodation to individuals with disabilities. If reasonable accommodation is needed to participate in the interview process or to perform essential job functions, please contact our US Foods Application Accommodation Line at 855-873-2468. You will be prompted to leave a message. Please state the specifics of the assistance needed and your contact information. A member of our HR department will return your call within two business days.

DirectEmployers