Senior Manager - Information Security

The Issues Management Specialist reviews, facilitates, monitors, propose remediation plans and escalates Issues to ensure any non-compliance to Standards has the appropriate risk documented and accepted.

In addition, this position will follow up on Issues post approval to ensure remediation plans are carried out and renewal requests are submitted as required.

• Facilitate the Issues Management process
• Expert in PepsiCo Information Security Policy and Standards and understanding of deviations to the standards
• Review Issues Triage and Issue management requests and work with requestor on required updates, while proposing remediation and/or mitigating controls.
• Gain alignment with all teams required to determine risk and overall impact to the organization (i.e. Security Engineering, Attack Service Management, Third-Party Assessments)
• Determine risk level of each Issue by assessing the inability to comply, risk introduced, mitigations to be put in place and remediation plans.
• Provide recommendations and explain Issues and risks to the Director and/or the Sr. Director for final review and approval.
• Provide recommendations for remediation for non-compliance.
• Follow up on expiring Issues to ensure Risk has been remediated or a new request is submitted.

• Strong understanding of information security frameworks, regulations, and standards such as NIST 800-53, CIS, and ISO 27002

• Proficient in Power BI for developing reports and dashboards to support data-driven decision-making.
• Strong skills in developing ad hoc reports and managing metrics.
• Knowledge of Azure and general cloud security principles.
• Ability to read and explain scan (infrastructure, applications, databases) and pen testing results to technical and non-technical stakeholders, guiding them on risk and vulnerability remediation.