Transformation BISO - Global Functions Transformation and Products

Overview

The Transformation BISO is a proven leader in the Business Information Security Office responsible for guiding and driving information security risk management priorities, issues and mitigation as an embed in Pepsi Co's Global Functions & Products team. Part of a team focused on non-Cybersecurity stakeholders, this role will serve as the trusted security advisor to digital teams that are transforming functions such as Agriculture, Sustainability, Environmental Health & Safety, R&D and Legal.

The role will partner closely to ensure appropriate organizational awareness and risk management as business processes and digital capabilities evolve. Adopting multi-faceted security approaches considering vendor, data, AI, and access management risk, the role requires creativity, resourcefulness and proactive engagement with stakeholders across Cybersecurity, business and technical capability teams to identify and mitigate risk.

The role also continuously strives to shift security left with key technology vendors and platforms, minimize barriers to security compliance and attain new efficiencies in risk management processes.

Responsibilities

• Act as Security Coach and advisor to global transformation teams in all aspects of security risk management, from issue identification, stakeholder alignment, development of mitigating controls, and execution of remediation plans
• Identify, assess, and report on security gaps within global transformation and product teams; develop action plans to address opportunity areas
• Provide feedback and coaching to delivery teams to drive defense-in-depth security requirements from initiative planning cycles
• Engage with key stakeholders and partners as trusted advisor on Information Security strategy, services and processes
• Develop tailored content and present on Information Security programs, initiatives, incidents, threats and risk topics
• Identify and overcome stakeholder resistance and barriers, tightening the cohesion between Business, Technology and Cybersecurity
• Monitor and facilitate post-incident recovery activities in collaboration with stakeholders, incident management teams and other key partners
• Continuously advance and deepen knowledge of Pepsi Co's business, technology and security ecosystem, along with associated best practices and emerging threats

Compensation & Benefits:

• The expected compensation range for this position is between $123,500 - $206,750.
• Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.
• Bonus based on performance and eligibility target payout is 15% of annual salary paid out annually.
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.
• In addition to salary, Pepsi Co offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility:
  Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

Required Education/

Experience:

• Bachelor's or Advanced degree (Information Security, Cybersecurity, or Business with a a digital focus preferred)
• 10+ years of digital experience, including leadership roles (Consumer and Packaged Goods preferred, with domain knowledge in one or more of Agriculture, Environmental Health & Safety, Sustainability, R&D, Legal, HR)
• 5+ years Information Security experience (technical experience as a BISO, security architect or engineer preferred)
• CISM, CISSP, CRISC, GIAC/GSEC certifications (preferred)
• Well-versed in NIST Cybersecurity Framework and AI RMF, GDPR, and CCPA, CIS Top 20 Critical Controls, OWASP Top 20 and LLM Top 10
• Knowledge of Project Management and Agile methodologies
• Written/spoken English proficiency

Skills:

• Ability to translate technology risk into business language
• Commercial acumen - understanding cost/benefit of security investments
• Strong interpersonal, oral and written communication skills
• Innovative and collaborative problem solver
• Highly self-motivated and directed
• Strong organizational, project management and presentation skills
• Technical knowledge in cloud security architecture (AWS, Azure, GCP), Zero Trust security frameworks, IAM, AI/ML security considerations and governance)
• Dedicated and resourceful life-long learner
• Excellent attention to detail
• Ability to analyze and automate processes for effectiveness and efficiency

• Ability to manage multiple priorities and work across multiple organizations and teams
• Willing "can do" attitude
• Ability to effectively prioritize and execute tasks in a high-pressure environment

EEO Statement

Our Company will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Credit Reporting Act, and all other applicable laws, including but…