Manager Information Security

Title: Manager Information Security

               

Location: Eagle, ID

               

About Lamb Weston

You’ve probably enjoyed our fries without even knowing it! As a leading manufacturer in our industry, and public Fortune 500 company, we inspire and bring people together with foods they love and trust. Our customer base includes international food service providers, restaurants, and households in over 100 countries around the world.

A highly innovative global corporation with a start-up mindset, we empower every individual to make a genuine difference. You’ll gain access to hands-on training to fuel your growth and success, explore opportunities for new solutions, and you’ll join a winning team of 10,000+ people all dedicated to raising the bar – together.

If you have a strong drive for results, a desire to help us bring the world together through our fries, and are ready for a fresh challenge, we want to hear from you.

Job Description Summary

               

Manager Information Security plays a crucial role in ensuring that key IT controls across the enterprise are effectively defined and appropriately tested to meet professional standards and key deadlines as part of our SOX compliance program. Reporting to the Director of Security Architecture and Application Security within the Cybersecurity organization, this role is primarily responsible for control testing, and issues management of IT General Controls within key systems supporting our financial reporting processes. This role coordinates SOX control deliverables with GRC compliance team, IT stakeholders, and Internal Audit; builds and maintains cross-framework mappings. This includes working with control owners to help ensure that any deficiencies are properly addressed. Prior experience in IT General Controls (SOX) at a Manager level is required.

Job Description

Responsibilities
• Own and maintain the SAP Risk Management rule set, ensuring alignment with SOX control 
requirements, segregation of duties principles, and evolving business processes to support 
compliant and efficient access governance.
• Able to handle multiple concurrent projects, including work paper review, workload balancing, 
defining, and monitoring progress against key milestones.
• Able to handle a complex and rapidly changing IT and business environment and respond 
accordingly to ensure successful completion of assigned workflow control deliverables in the IT 
SOX program.
• Serve as the Subject Matter Expert and Technical Process Innovator for all IT General Control 
(ITGC) (SOX controls), acting as a unification point between process owners and control 
stakeholders to align on requirements, interpret testing results, and drive timely remediation of 
any identified deficiencies.
• Performing risk assessment to defined systems and working with Internal/External Audit, 
identify which IT General Controls are to be in scope (Key Controls).
• Working with process owners to achieve successful implementation of IT controls for systems
and applications newly added to scope.
• Identifying opportunities for continuous improvement in the quality and efficiency of our IT 
General Controls (SOX) program
• Communicating with GRC Compliance and Internal Audit management regarding testing status, 
control issues and deadlines.
• Building and maintaining effective relationships with the business areas, including understanding 
changes to IT processes and potential impact to the IT General Control environment.
• Collaborating across the GRC, and Internal Audit team to achieve department goals beyond IT 
General controls, such as teambuilding efforts or cross-department initiatives.
• Maintaining sufficient IT-based knowledge, awareness of emerging trends and professional 
certifications to meet the requirements of the Cyber Security and Internal Audit Charter.
• Function as a Technical Process Innovator and Subject Matter Expert for SAP Risk Management 
and IT General Controls monitoring, optimizing monitoring processes, strengthening control 
reliability, and advancing compliance efficiency.
Lamb Weston Proprietary
• Oversee SAP GRC Risk Management rule set integrity through continuous review and auditing 
of segregation of duties and sensitive access risks, ensuring documentation accuracy and 
sustainable governance practices.
• Build and maintain crosswalks across frameworks (SOX, ISO 27001/2, NIST CSF/800-53, SOC 
2, GLBA, as applicable) to enable control reuse and reduce audit duplication.
Skills
• Strong understating and management of SAP GRC modules and rule sets.
• Proven ability