Deputy Director - BISO Information Security - Data Analytics & AI

Pepsico; Hyderabad; Hybrid; INR 3,000,000 - 6,000,000; Full time

Job summary

PepsiCo is seeking a Deputy Director Information Security Integration to lead security risk management within the Data and AI team. You will guide risk priorities, mitigation efforts, and secure adoption of AI capabilities across global capability teams, acting as a security coach and trusted advisor to drive secure, compliant, and efficient security practices.

You will work across Cybersecurity, Business, and Technical teams to reduce barriers to security compliance, advance security left, and

Qualifications

• 11-14 years total experience in IT/cybersecurity
• 4+ years IT experience in Consumer and Packaged Goods with AI/data analytics knowledge
• 3+ years Information Security experience (BISO/security architect/engineer preferred)
• CISM, CISSP, CRISC, GIAC/GSEC certifications preferred
• Familiarity with NIST Cybersecurity Framework, AI RMF, CIS Top 20, OWASP Top 20, LLM Top 10
• Knowledge of Project Management and Agile methodologies
• Excellent written and spoken English proficiency

Responsibilities

• Provide strategic leadership for secure AI/GenAI adoption, driving governance, risk oversight, and security-by-design expectations
• Act as Security Coach and advisor to global capability teams across risk management, controls, and remediation
• Identify, assess, and report security gaps; develop action plans to address opportunities
• Coach delivery teams to drive defense-in-depth security throughout initiative planning
• Engage stakeholders as trusted advisor on Information Security strategy and processes
• Develop tailored content and present on security programs, incidents, threats, and risk topics
• Overcome stakeholder resistance to tighten collaboration between Business, IT, and Cybersecurity
• Monitor post-incident recovery activities with incident management and partners
• Continuously deepen knowledge of PepsiCo’s business, tech, and security ecosystem

Skills

Communication

Problem solving

Plain language

Self-motivated

Organization

Lifelong learner

Attention to detail

Process automation

Multi-tasking

Can-do attitude

Prioritization

Education

Bachelor's or Advanced degree in information security / IT

Job description

The Deputy Director Information Security Integration is a key member of the Business Information Security Office responsible for guiding and driving information security risk management priorities, issues, and mitigation as an embed in PepsiCos Data and Artificial Intelligence team. Part of a small team focused on stakeholder adoption of multi-faceted security approaches, the role requires creative, resourceful approaches and proactive engagement with stakeholders across cybersecurity, business, and technical capability teams to identify and mitigate risk. The role also continuously strives to shift security left, minimize barriers to security compliance, and attain new efficiencies in risk management processes.

Responsibilities

• Provide strategic leadership for the secure adoption of AI/GenAI across PepsiCo by driving governance, risk oversight, and security-by-design expectations, and partnering with cross-functional stakeholders to ensure AI capabilities are deployed responsibly, compliantly, and with acceptable risk.
• Act as Security Coach and advisor to global capability teams in all aspects of security risk management, from issue identification, stakeholder alignment, development of mitigating controls, and execution of remediation plans
• Identify, assess, and report on security gaps within global capability teams; develop action plans to address opportunity areas
• Provide feedback and coaching to delivery teams to drive defense-in-depth security requirements from initiative planning cycles
• Engage with key stakeholders and partners as a trusted advisor on Information Security strategy, services, and processes
• Develop tailored content and present on Information Security programs, initiatives, incidents, threats, and risk topics
• Identify and overcome stakeholder resistance and barriers, tightening the cohesion between Business, IT, OT, and Cybersecurity
• Monitor and facilitate post-incident recovery activities in collaboration with stakeholders, incident management teams, and other key partners
• Continuously advance and deepen knowledge of PepsiCo’s business, technology, and security ecosystem, along with associated best practices and emerging threats

Qualifications

Required Education/Experience

• Bachelor’s or Advanced degree (Information Security or IT-related studies preferred)
• 11-14 years of total experience
• 4+ years of IT experience (Consumer and Packaged Goods preferred, with technical knowledge in AI, data science, data analytics)
• 3+ years Information Security experience (technical experience as a BISO, security architect, or security engineer preferred)
• CISM, CISSP, CRISC, GIAC/GSEC certifications (preferred)
• Well-versed in NIST Cybersecurity Framework and AI RMF, CIS Top 20 Critical Controls, OWASP Top 20 and LLM Top 10
• Knowledge of Project Management and Agile methodologies
• Written/spoken English proficiency

Skills

• Strong interpersonal, oral, and written communication skills
• Innovative and collaborative problem solver
• Ability to translate technical information into plain language
• Highly self-motivated and directed
• Strong organizational skills
• Dedicated and resourceful life-long learner
• Excellent attention to detail
• Ability to analyze and automate processes for effectiveness and efficiency
• Ability to manage multiple priorities and work across multiple organizations and teams
• Willing “can do” attitude
• Ability to effectively prioritize and execute tasks in a high-pressure environment