Serve as the primary Information Security (Infosec) lead for PepsiCo’s Supply Chain (Africa, Middle East, South Asia, International Beverage) and Consumer & Commercial (EMEA) functions. Provide trusted, business-aligned security advisory and execution across the region to manage cyber risk, enable secure solution delivery, drive vulnerability and third‑party risk remediation, and embed security into processes and product lifecycles to protect data, operations, brand and stakeholder trust.
Responsibilities
- Lead security intake for Supply Chain & Consumer/Commercial workstreams in scope; ensure timely assessment, prioritization and routing of information security requests and issues.
- Act as the regional escalation point to the Sector BISO and Global Information Security for gaps, risk exposures and remediation plans; track closure and report status.
- Provide security advisory across project lifecycles (planning → deployment → operations), including ISA onboarding, secure design reviews and security requirement definition.
- Drive vulnerability management and remediation coordination with owners and Deployment Leads; validate mitigations and report risk reduction.
- Support Application Risk Assessments, legacy remediation and DevSecOps coaching for Supply Chain engineering teams.
- Manage third party security interactions: assessments, remediation tracking and collaboration with TPRM and blockchain provenance teams.
- Support Incident Response and Enterprise Incident Management locally; coordinate stakeholders, containment and post incident remediation.
- Own stakeholder engagement and awareness: design and deliver security content, training, and governance briefings to gain business buy in.
- Contribute to M&A;/JV due diligence and onboarding for security posture, particularly for bottlers, suppliers and technology integrations.
- Ensure security considerations for data residency/GCC processing and Beyond the Bottle device lifecycles are considered.