Data Security Sr. Analyst

PepsiCo Deutschland GmbH; Warszawa; Hybrid; PLN 208,000 - 254,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Job summary

PepsiCo Deutschland GmbH is seeking a seasoned cybersecurity professional to join the Cyber Fusion Center as part of the Global Data Security Program in Warsaw, Poland.

You will lead initiatives to protect data assets, implement scalable security solutions, and collaborate with cross-functional teams across legal, privacy, analytics, and platform domains. Fluency in English and strong communication are essential; hybrid work is available.

Qualifications

• 3+ years in cyber security with senior-level responsibilities.
• 3+ years experience with Microsoft Purview Data Loss Prevention (DLP) and Proofpoint or equivalent tools.

Responsibilities

• Execute on projects, objectives and deliverables aligned with team goals.
• Develop program metrics, measure progress and drive improvements.
• Develop technical documentation like system design and data flows.
• Identify vulnerabilities and implement security measures to enhance data protection.
• Routinely update program documentation and processes to adapt to threats.
• Create and deliver training; mentor junior staff and conduct security reviews.
• Collaborate with senior leadership and cross-functional teams across security, legal, privacy, analytics, and architecture.

Skills

Problem solving

Analytical thinking

Strong English communication

Team player

Decision making under pressure

Tools

Microsoft Purview DLP

Proofpoint (Endpoint)

DLP tools configuration

CASB

SASE

DSPM

Job description

Overview

Operating within the Cyber Fusion Center, the Global Data Security Program is responsible for safeguarding the confidentiality and integrity of PepsiCo's data assets. This role is dedicated to developing and deploying scalable solutions and automation to accelerate global data protection initiatives while proactively mitigating PepsiCo's exposure to cyber risks.

Responsibilities

Accountabilities

• Execute on projects, objectives, and deliverables in alignments with team vision, mission, and goals.
• Develop program metrics, continuously measure progress, and drive improvements.
• Develop technical documentation (i.e. system design, architecture diagrams, data flows, functional specifications).
• Identify and address vulnerabilities and implement security measures to drive continuous improvement of data protection practices.
• Routinely develop and update program documentation, processes, and technologies to adapt to emerging threat landscape.
• Create and deliver training sessions; mentor junior team members; and engage in knowledge transfer sessions, technical design reviews, security reviews, and business review meetings.
• Understanding of remediation workflows; reviewing incidents, working with data owners to secure business processes, driving risk reduction and resolving issues
• Collaborate with the Senior leadership and cross-functional team including security operations, legal, privacy, data and analytics, enterprise architecture, Platform team, and sector functions.

Qualifications

Years of Experience

• 3+ years in cyber security, 1 year of relevant work experience.
• 3+ years experience with Microsoft Purview Data Loss Prevention (DLP); Proofpoint (Endpoint) or equivalent tools

Mandatory Technical Skills

• Manage DLP tools which includes configuring policies, tuning, testing, and implementation of new features and functionality.
• Provide support across multiple areas of data security and operations – Data Loss Prevention (DLP), data minimization, data discovery, cloud data protection, Privileged Access Management (PAM), data privacy, data labeling, data classification and rights management, data encryption, data access governance, etc.
• Manage technical configuration, implementation, administration, management and support of multiple data security products and solutions such as CASB, SASE, DLP, DSPM etc.
• Develop technical documentation (i.e. system design, architecture diagrams, data flows, functional specifications).
• Leverage APIs to collect key performance indicators (KPIs) and key risk indicators (KRIs) for data governance and protection controls.
• Collaborate with the Senior leadership and cross-functional team including security operations, legal, privacy, data and analytics, enterprise architecture, Platform team, and sector functions. Identifying risk; mitigate risk verses eliminating risk. Basic risk management and risk reduction skills and experience.

Non-technical Skills

• Excellent problem-solving, analytical, and critical thinking skills
• Demonstrated ability to autonomously make high-judgment decisions and take calculated risks.
• A proactive and positive team player who is impact-focused, driven, curious, analytical, and a self-starter.
• Ability to establish trust relationships and influence others to positively impact the security posture and the business.
• Flexible and adaptive to support a dynamic and global environment with diverse stakeholders and ambiguity.
• Solid customer orientation with excellent oral and written communication skills in English.
• Must be able to operate well under pressure.

Differentiating behaviors

• Skilled in leading complex technical projects with expertise in cybersecurity, software engineering, agile methods, and customer interaction.
• Proficient in evaluating the relative costs, benefits, and trade-offs of potential courses of action to pinpoint the optimal solution.
• Skilled in task organization, time management, and prioritization to align actions with business objectives.
• Meticulous attention to detail, adept at articulating crucial specifics clearly in both verbal discourse and technical documentation.
• Proficiency in cultivating cooperative, transparent working partnerships with technology teams and various stakeholders, encompassing vendor connections.
• Effective communication skills, capable of conveying information clearly and engaging with technical and non-technical audiences across various levels.
• Information Security certifications such as CEH, CISM, CISA, Security+, Network+, CISSP, OSCP, GPEN, GWAPT, GXPN, GSE are a plus.

Compensation and Benefits:

• The expected starting compensation range for this position is 231,000 PLN annually.
• Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary.
• This role is eligible for an annual bonus of 15% of annual salary, based on performance and eligibility.
• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility.

#LI-Hybrid