Architect , Standard Exceptions Specialist

Job Description

At PepsiCo, it takes a global team to tackle some of the most complex problems and our global Information Security team is no exception. Our high energy, collaborative team is consistently innovating and supporting one another across borders. Leveraging the National Institute of Standards and Technology (NIST) cybersecurity framework, we leverage the cyber fusion integration concept across processes and key technologies to protect information assets and address the greatest information security risks for PepsiCo. Our teams use key technologies including detection systems, endpoint security solutions, automation capabilities, data protection, and vulnerability analysis tools to deliver global security solutions, actionable security intelligence, and secure platforms including identity and access management systems.This innovative and diverse organization partners to deliver information security capabilities to protect PepsiCo and cultivate a security accountable culture. We protect more than IT infrastructure and services, we enable the broader business securely by building security into the services and delivery team workflows. Our capabilities extend into the business, including key areas such as Manufacturing and Operational Technology and protecting privacy, digital assets, and business operations.If you are an Information Security professional with experience in attack surface management, security engineering, enterprise access management, or governance risk and compliance, come join our thriving team where you can make an impact and help influence and drive the Information Security agenda at PepsiCo.We are Seeking an Exceptions Specialist responsible for reviews, facilitates, monitors and escalates Standards Exceptions to ensure any non- compliance to Standards has the appropriate risk documented and accepted. In addition, this position will follow up on exceptions post approval to ensure remediation plans are carried out and renewal requests are submitted as required.Qualifications/ RequirementsFunctional Responsibilities:Facilitate Security Standard ExceptionsExpert in PepsiCo Information Security Policy and Standards and understanding of deviations to the standardsReview exceptions requests and work with requestor on required updates.Gain alignment with all teams required to determine risk and overall impact to the organization (i.e. Security Engineering, Attach Service Management, Third- Party Assessments)Determine risk level of each exception by assessing inability to comply, risk introduced, mitigations to be put in place and remediation plans.Provide recommendation and explain exception and risk to Director and/ or Sr. Director for final review and approval.Provide recommendations for remediation for non- compliance.Follow up on approved exceptions to ensure remediation plans are in progress and on track.Follow up on expiring exceptions to ensure Risk has been remediated or new request is submitted.Standards:Identify and recommend Security Standards that need to be altered or documented.Develop/ Maintain metrics on exceptions to allow aggregated risk to be measured.Identify exception patterns by analyzing historical exceptions and recommend adjustments to standards as needed to create efficiencies within processAbility to influence and inform requestors and risk acceptors (up to the VP level) on the impact of the exception request to the organizational security posture.Able to defuse situations and collaborate with diverse personalities to achieve objectives.Able to influence parties as needed to ensure the correct decisions are made to protect PepsiCoAttention to detail, keeping copious notes and regular follow- up with non- responders over email, IM and meetings as requiredStrong written and verbal skillsWilling/ can doattitudeBachelors degree in Cyber Security, Computer Information Systems, Computer Science, or other STEM equivalent required.CISSP or CISM certification a plusExperience working in a global environmentOrganized and detail orientedSelf- starter who demonstrates leadership skills and takes initiativeAbility to manage multiple priorities and work across multiple organizations, sectors and teamsStrong communication skills and ability to interact effectively with IT teams throughout the worldAnonymized data is stored for redirects to the career site tracking successful searches leading to job applications in effort to measure effectiveness of partners in sourcing job candidates and job searches. We request use of anonymized data to improve your experience on our site.,

Keyskills :
ecurity policy equipment supply strong communication skills digital assets cyber security