Global Security Incident Response Commander

Overview The Global Incident Response Commander is responsible for coordinating PepsiCo’s response to high impact cyber security incidents. This includes maintaining the cyber security incident response plan, conducting tabletop exercises, managing 3rd party incidents, and providing executive awareness and communications regarding significant incidents and threats. Responsibilities Serve as the incident commander for high-profile cyber security that includes response coordination, containment, incident reporting, and management of after-actions Coordinate response activities in partnership with global incident managers for high priority incidents Coordinate and direct efforts among the Cyber Security Incident Response Team (CSIRT) throughout the incident response lifecycle Serve as liaison between technical response and the business to minimize impact and maintain business operations Maintain and ensure adherence to the PepsiCo Cyber Security Incident Response Plan Provide timely and relevant updates to executive stakeholders and decision makers Conduct after action reporting and provide relevant insights to guide improvements and adjustments to PepsiCo’s information security posture Test and maintain incident response plans and processes to address existing and emerging threats Establish strong working relationship with all Cyber Fusion Center functions to maintain situational awareness of potential risks to the PepsiCo environment Organize, conduct, and maintain documentation for executive and technical table-top exercises Maintain incident response retainers and manage engagement with retained vendors Qualifications Bachelor’s degree required in Computer Science, Cybersecurity, or related discipline CISM, CISSP, or other relevant certifications preferred 10 years of related IT Security experience. Written/spoken English proficiency required Knowledge of Project Management methodologies preferred Experience with large scale and complex incidents of all types that includes APT, DDOS, 3rd party, ransomware, intrusion, vulnerability exploitation, and data exfiltration Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one Ability to work well under pressure while maintaining a professional image Ability to communicate complex and technical issues to diverse audiences in a clear, authoritative, and actionable manner A team-focused mentality with the proven ability to work effectively with diverse stakeholders Strong organizational skills with proven ability to manage multiple high visibility issues simultaneously