Cybersecurity GRC Associate Manager at PepsiCola Bottling Company of New York Inc

Mexico City, , Mexico -

Full Time

Start Date

Immediate

Expiry Date

19 May, 26

Salary

0.0

Posted On

18 Feb, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Policy And Standards Enforcement, Risk Analysis, Security Incident Management, Data Protection, Regulatory Requirements, Vulnerability Remediation, Stakeholder Engagement, Security Awareness, Audit Support, Information Security Assessment, Risk Management, Interpersonal Communication, Analytical Abilities, Problem Solving, ITIL Knowledge, SDLC Knowledge

Industry

Food and Beverage Services

Description

Overview CAREERS TO SMILE ABOUT At PepsiCo, you’ll discover a place where our mission is to create smiles around the world. With a portfolio of more than 500 beloved brands including, Gatorade, Lay’s and Quaker, our work touches millions of people every day. At the heart of the company is a team of thinkers, creators, and problem-solvers who collaborate to innovate and turn ideas into action. Driven by innovation and a focus on creating joyful moments through food and drinks, our decisions are guided by consumer centricity, creating opportunities for our associates to do meaningful work and make a lasting impact in the communities we serve. Whatever your role, you’ll be part of a global community that values your ideas and empowers you to make an impact, on your career and on the world around you. Responsibilities The Opportunity The Cybersecurity GRC Principal is responsible for information security risk and management processes within Pepsico LATAM Foods region including but not limited to security risk and exception analysis, information security work in-take processes, support for cyber security awareness initiatives, collaboration on development of remediation plans, and data protection activities. The role also ensures security incident management and processes are given appropriate focus, assist with escalations and are handled expeditiously as per defined SLAs. Your Impact Accountabilities The Cybersecurity GRC Associate Manager is responsible for Policy & Standards enforcement within the regions. Act as the primary contact within their region for security work intakes, business demand and collecting local regulatory requirements. Act as a primary contact for data protection program within the region, ensure all current/legacy systems are mapped and required controls are identified and ensure a plan is developed to remediate control deficiencies identified. This role will assist analysis and remediation of security breaches and vulnerability issues in a timely and accurate fashion, and conduct user activity audits where required. This role supports the I&O and Digital Deployment teams on remediation activities within the regions and influence to have required downtime to meet remediation requirements is arranged. Also responsible to work with the Third Party locally on websites security remediation. Guarantee there is an operational support model to provide next level support for regions to all security systems and their corresponding or associated software, tools or applications. Assess security level within the regions and report status to Sector BISO. Collaborate with HCL and Compute teams to ensure required non-SOX (MMSF included) evidences are ready and effective to cover Security non-SOX controls. Conduct / Assist investigations and requirements from Audit / Legal / HR in the regions as needed. Responsibilities Engage with key stakeholders to ensure that processes and initiatives operate within the documented security org framework, monitonr security policy/standards compliance, and Cybersecurity strategy is understood and communicated. Support and track sector based security exception process and remediation.Review and sign-off on Information Security Assessment (ISA) completion. Partner with Manufacturing OT and IT team for Cybersecurity engagement activities and partner awareness. Identify Stakeholder resistance and barriers and tighten the cohesion between business and Cybersecurity. Represent BISO team through security awareness and presentations. Engages with IT Lead and Project owners throughout the project lifecycle as oversight and monitoring for ISA service delivery and process management. Perform sector risk and user impact for cybersecurity related projects and coordinate comms related tasks (translation, training, support, request for change, support model, etc). Assist on the delivery of Cyber Security program initiatives within the regions through service/product owners alignment to manage sector security initiatives. Support of vulnerability remediation plan development and owner identification (e.g., manufacturing security assessments, security exceptions). Leading exception/issue risk management through exception initiation, stakeholder identification, compliance gaps, remediation plan recommendations, potential solutions and sign-off activities. Oversees and tracks successful implementation of agreed to Exceptions'/Issues remediation plans and timelines. Develop and implement strategies for engaging business functions on information security matters and gain buy-in. Responsible for educating business functions on Cybersecurity services and processes. Partners and supports Security Awareness Training team and local HR teams to meet security awareness training targets . Perform local security awareness initiatives such as clean desk exercise to reinforce and promote security standards compliance. Supports IR in driving awareness and remediation of security compliance related incidents locally to include engagement of appropriate stakeholders. Support Data Protection Evaluation and Recertification program through Digital Deplyment and S&T engagement and coordination of activities. Provide feedback on security requirements (by data class) during AOP. Assist Security review and Trust by Design in partnership with project teams in security requirements' funding estimates for CAPEX/Projects. Collaborate with and support Third Party Security Risk Management team on assessments, issues, escalations and remediation. Qualifications Who Are We Looking For? Required Education/Experience Bachelor’s degree required. English written / Spoken 90% is a Must. 6+ years of related IT Security business work experience is a must. CISM, CISSP certifications are a desired state. Knowledge of Processes (ITIL), V3 Certification is a desired state. Knowledge of Project Management methodologies (SDLC). Skills Strong interpersonal and oral communication skills. Highly self-motivated and directed. Strong organizational skills. Excellent attention to detail. Ability to effectively prioritize and execute tasks in a high-pressure environment. Experience working in a team-oriented, collaborative environment. High level of analytical and problem-solving abilities. Strong understanding of both IT and Information Security goals and objectives. Strong problem solving skills. If this is an opportunity that interests you, we encourage you to apply even if you do not meet 100% of the requirements. What can you expect from us: Opportunities to learn and develop every day through a wide range of programs. Internal digital platforms that promote self-learning. Development programs according to Leadership skills. Specialized training according to the role. Learning experiences with internal and external providers. We love to celebrate success, which is why we have recognition programs for seniority, behavior, leadership, moments of life, among others. Financial wellness programs that will help you reach your goals in all stages of life. A flexibility program that will allow you to balance your personal and work life, adapting your working day to your lifestyle. And because your family is also important to us, they can also enjoy benefits such as our Wellness Line, thousands of Agreements and Discounts, Scholarship programs for your children, Aid Plans for different moments of life, among others. We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We respect and value diversity as a work force and innovation for the organization.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The Cybersecurity GRC Associate Manager is primarily responsible for enforcing security policies and standards within the regions, acting as the main contact for security work intakes, and managing the regional data protection program, including control mapping and remediation planning. This role also involves assisting with security breach analysis, vulnerability remediation, conducting user activity audits, and ensuring operational support models for security systems are in place.