Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Info Security Assoc Manager @ Pepsico

Home > IT Security

Pepsico  Info Security Assoc Manager

Job Description

 Overview The Information Security Assessment Lead is responsible for safeguarding PepsiCo's digital assets by assessing the cyber risk and compliance of new and changing systems against information security requirements and managing risks associated with IT and Information Security systems throughout the project lifecycle. The ISA Lead will collaborate with various security teams and businesses to facilitate compliance with Information Security standards, provide technical guidance for key strategic initiatives, and drive the secure delivery of technology solutions within PepsiCo. The role heavily focuses on security risk-based assessments, and data-driven decision-making and automation.  Responsibilities 
  • Security Design ExpertiseProven track record in assessing security designs, including data flow diagrams, architectural blueprints, low-level designs, networking diagrams, authentication mechanisms, and authorization schemes. Must demonstrate experience in aligning these designs with industry standards such as NIST 800-53, ISO 27002, CIS, and OWASP to ensure robust security postures. Skilled at identifying potential security gaps and implementing best practices to fortify system architectures against emerging threats. Familiarity with the latest security tools and technologies, as well as experience in integrating security measures into complex IT environments, is essential.
  • Compliance AssessmentAssess new and changing application designs and requirements to ensure compliance with PepsiCo information security standards.
  • Risk CommunicationIdentify, quantify, and communicate technology risks impacting the business, recommending resolutions and identifying root causes. Explain scan results (infrastructure, applications, databases) and pen testing results to stakeholders.
  • Threat ModelingUtilize expert knowledge in threat modeling techniques and methodologies to proactively identify, assess, and prioritize security risks, enabling the organization to implement targeted mitigation strategies and maintain a robust information security posture.
  • Project Lifecycle ReviewsReview IT and Information Security systems throughout the project lifecycle, identifying risks and security requirements, and recommending paths to eliminate identified risks and implement compensating controls.
  • Automated Risk AssessmentsConduct risk-based assessments using automated tools and techniques to prioritize and address security risks.
  • Collaboration and EducationCollaborate with various IT and Business teams to ensure they are knowledgeable about Information Security processes and requirements, influencing them to eliminate or reduce risks.
  • ServiceNow UtilizationExperience using ServiceNow to gather necessary information and data, automating security assessment processes to enhance efficiency and effectiveness.
  • Metrics Management and ReportingManage operational metrics related to the ISA and GRC processes, utilizing Power BI for advanced reporting, tracking project progress, and developing corrective action plans.
  • Process Improvement and Proactive SecurityGovern Information Security services from the ISA, tracking process metrics, identifying issues, and driving process improvement initiatives. Stay updated with threat intelligence, leverage Azure and cloud security knowledge, and implement Agile and DevSecOps methodologies to integrate security into the development process.

    •  Qualifications 
  • A minimum of 8 years of experience in Information Security, IT Risk Management, or a similar role.
    •  Mandatory Technical Skills:
  •  
  • In-depth technical experience and knowledge of infrastructure technologies, networks, web, computing, cloud services, manufacturing equipment, mobile devices, and information (cyber) security.
  • Strong understanding of information security frameworks, regulations, and standards such as NIST 800-53, CIS, and ISO 27002.
  • Proficient in ServiceNow, with the ability to leverage its modules for information gathering, data analysis, and automation of the ISA service.
  • Experience in threat modeling and applying threat modeling methodologies in previous roles.
  • Proficient in Power BI for developing reports and dashboards to support data-driven decision-making.
  • Strong skills in developing ad hoc reports and managing metrics.
  • Knowledge of Azure and general cloud security principles.
  • Ability to read and explain scan (infrastructure, applications, databases) and pen testing results to technical and non-technical stakeholders, guiding them on risk and vulnerability remediation.

    •  Mandatory Non-Technical Skills:
  •  
  • Proficient in influencing and educating stakeholders on security best practices and policies, ensuring understanding and adherence to security standards.
  • Established a reputation as a trusted adviser, providing expert guidance on information security matters.
  • Strong presence to represent PepsiCo Information Security in complex situations with business and IT partners.
  • Ability to collaborate with various stakeholders, including business units and product managers.

    • Job Classification

    Industry: Beverage (Brewery / Distillery)
    Functional Area / Department: IT & Information Security
    Role Category: IT Security
    Role: Manager Information Security
    Employement Type: Full time

    Contact Details:

    Company: Pepsico
    Location(s): Hyderabad

    + View Contact

    Keyskills:   information security power bi nist threat modeling servicenow it risk management security management data analysis cloud security microsoft azure networking security framework threat intelligence devsecops security systems agile security services

     Fraud Alert to job seekers!

    ₹ Not Disclosed

    Similar positions

    Security Engineer - Github -Secret Management tool / DevScops Engineer

    • Cirruslabs
    • 2 - 6 years
    • Hyderabad
    • 2 days ago
    ₹ Not Disclosed

    Security Consultant

    • VProtect
    • 2 - 7 years
    • Mumbai
    • 3 days ago
    ₹ 50,000-70,000 P.A.

    Cyber Security Program Manager

    • Techwaukee
    • 10 - 15 years
    • Bengaluru
    • 5 days ago
    ₹ Not Disclosed

    Project Manager - Technical Writer, Security Remediation

    • Amiti Software
    • 2 - 5 years
    • Bengaluru
    • 6 days ago
    ₹ Not Disclosed

    Pepsico

    Pepsico India Holdings Pvt Ltd (Lays)

    IndigoJobs © 2025

    For enquiries: contact(at)indigojobs.in

    We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in