ARE YOU A CURRENT US FOODS EMPLOYEE? PLEASE APPLY DIRECTLY THROUGH OUR INTERNAL WORKDAY CAREER SITE.

Join Our Community of Food People!

The IAM Controls Sr Manager is responsible for ensuring US Foods compliance with applicable regulatory requirements in its Identity and Access Management solution. These responsibilities include assessing processes and technologies and internal controls for regulatory compliance, anticipating interests of audit teams (both internal and external audit), proactively identifying compliance gaps and issues. Additionally, the position is responsible for identifying and assisting in documenting identity and access controls, implementing, and documenting new internal controls, and establishing an internal monitoring function to audit compliance with such internal controls. The position will have a key role in assessing the IT General Controls requirements of the Sarbanes-Oxley Act of 2002. Finally, this role will take a continuous improvement approach to US Foods’ compliance efforts that includes developing an ongoing program that assesses, reports on, develops, and improves the company’s key operational and internal controls in the identity and access management environment.

Flexible Work Policy: The work for the IAM Controls Sr Mgr position is completely 100% remote anywhere in the United States except Hawaii or United States Territories.  This position may have the potential to travel up to 20% dependent on business needs.

RESPONSIBILITIES  

Conduct comprehensive reviews and assessments of IAM controls, policies, and procedures to identify gaps, weaknesses, and areas for improvement

Review documented identity and access process flows, policies, and controls to ensure appropriateness to meet or exceed regulatory requirements and internal controls.

Improve SOX documentation for IAM (i.e., work with process owners to refine risk control matrix, improve process flows, refine / develop test procedures, propose control language and associated risks etc.)

Develop and maintain IAM control frameworks, standards, and guidelines to support consistent implementation and enforcement of controls across the organization

Design, execute and complete testing of the design and operating effectiveness of SOX IT controls, including entity and process level controls, and IT general and application controls

Advise and collaborate on projects by providing IT controls expertise and considerations

Work with process owners on developing new controls to address business changes and new auditing and accounting standards

Provide expertise and guidance on IAM controls to stakeholders, including IT teams, management, and external auditors

Lead and guide the development and implementation of remediation plans to address identified IAM control deficiencies or non-compliance issues

Stay informed about emerging threats, vulnerabilities, and regulatory changes related to IAM controls and recommend proactive measures to enhance security posture

Advance the ongoing relationship between US Foods IAM team and Internal Audit function

Review and evaluate new processes, policies, and systems to determine relevance to and impact on the SOX program, including assessing design of controls based on identified risks

Aid external auditors as necessary

Communicates status of audit results to management

Lead end to end walkthroughs to find risks, control gaps, and improvement opportunities

Lead the validation of current state system processes

Serve as a liaison for the security team

Work with Internal Audit team to ensure that audit findings are resolved timely

RELATIONSHIPS

Internal: IT Compliance, IT subject matter experts,Internal Audit, Governance and Risk, Finance, Sales, Retail, Product Owners, Human Resources, Legal, and Security Engineering

External: This role will interact frequently with external auditors and IAM vendor partnerships

MINIMUM QUALIFICATIONS

7 years’ experience in a Cybersecurity role or combined IT Audit and Cybersecurity roles with a focus in IAM, compliance, and/or general IT audit controls.

Demonstrable experience Knowledge of Sarbanes-Oxley general IT control areas

In-depth knowledge of IAM concepts, technologies, and best practices, including authentication, authorization, directory services, and access controls

Experience with IAM solutions such as Identity Governance and Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO), etc., is desirable

Excellent communication and presentation skills

Excellent judgment and the ability to make quick decisions when working in complex situations

High degree of integrity, trustworthiness, and confidence; represents the company and its management team with the highest level of professionalism

Organized, with the ability to prioritize and complete tasks 

Ability to work in a fast-paced environment with changing processes and procedures

Displays an analytical and problem-solving mindset

Strong EXCEL skills

Self-starter and flexible team player

Strong project management abilities

Possesses general business administration competencies

Technical background and thorough understanding of security threats 

Working knowledge of Windows, Linux, and Unix

Education

Bachelor’s degree in computer science, information assurance, MIS, or related field, or equivalent work experience

Certifications/Training

List any licenses or certifications desired by the position: CISA, CISM, SOX, CISSP, CIA, CAMS

PREFERRED QUALIFICATIONS

Controls at an infrastructure and application level, databases, and systems maintenance

Knowledge of and experience in utilizing various methodologies and frameworks, including, NIST, COBIT, COSO, ITIL

5+ years of Information Security experience

Scripting or programming skills preferred

Experience in a highly heterogeneous diverse technology environment with a mix of modern, custom, SaaS, and on-premises systems.

Strong knowledge of risk assessment and familiarity with tools and techniques used to provide control and monitoring mechanisms

PHYSICAL QUALIFICATIONS

Standard required physical activities including length of time performing each activity.

The following information is provided in accordance with certain state and local laws. Compensation depends on experience, geographic locations, and other factors permitted by law.  In California, the expected compensation for this role is between $115,900 and $154,500.  In Connecticut, the expected compensation for this role is between $122,000 or 162,700. In Colorado, the expected compensation for this role is between $102,500 and $136,700. In Maryland, the expected compensation for this role is between $109,500 and $146,100.   In Minnesota, the expected compensation for this role is between $102,500 and $136,700.  In New York, the expected compensation for this role is between $122,000 or 162,700. In Rhode Island, the expected compensation for this role is between $109,500 and $146,100. In Washington, the expected compensation for this role is between $115,900 and $154,500.  This role is also eligible for annual incentive plan bonus.  Benefits for this role include health insurance, pre-tax spending accounts, retirement benefits, paid time off, short-term and long-term disability, employee stock purchase plan, and life insurance.  To review available benefits, please click here: https://www.usfoods.com/careers/benefits.html.   

#LI-SK1

#REMOTE

***EOE Race/Color/Religion/Sex/Sexual Orientation/Gender Identity/National Origin/Protected Veteran/Disability Status***