Cybersecurity GRC Assoc Principal

PepsiCo; Plano (TX); On-site; USD 94,000 - 156,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Retirement plan

Paid time off

Job summary

PepsiCo is seeking a GRC Associate Principal to drive execution of the Global Information Security Requirements (GISR) program and govern third-party cybersecurity obligations. You will partner with Cybersecurity, Legal, Procurement, and business stakeholders to ensure cybersecurity requirements are embedded in contracts and monitored for compliance.

Responsibilities include contract governance, risk reporting, and alignment of policies with third-party governance processes.

Qualifications

• Experience translating cybersecurity requirements into business and contractual obligations.
• Knowledge of governance frameworks and contractual risk management.
• Strong stakeholder engagement across Legal, Procurement, and business functions.

Responsibilities

• Manage the GISR contract governance program, including contract reviews and cybersecurity requirement assessments.
• Maintain governance processes, controls, reporting, and compliance activities for cybersecurity contractual requirements.
• Collaborate with Cybersecurity, Legal, Procurement, and business stakeholders to support policy alignment and program improvement.

Skills

Governance

Cybersecurity

Contract governance

Stakeholder engagement

Education

Bachelor's degree in a related discipline

Advanced degree preferred

Cybersecurity certifications preferred

Tools

ServiceNow

Icertis

Microsoft 365

Job description

Overview

The GRC Associate Principal supports the execution and operational management of PepsiCo's Global Information Security Requirements (GISR) program and governance of PepsiCo's third-party cybersecurity obligations. This role partners with Cybersecurity, Legal, Procurement, and business stakeholders to ensure cybersecurity requirements are incorporated into third-party agreements, monitor compliance with contractual cybersecurity obligations, and provide metrics and reporting that support risk management, regulatory compliance, and program effectiveness. The position also helps drive alignment between cybersecurity policies, contractual requirements, and third-party governance processes.

Responsibilities

• Manage the execution of PepsiCo's GISR contract governance program, including contract reviews, cybersecurity requirement assessments, and negotiation support.
• Maintain governance processes, controls, reporting, and compliance activities to ensure consistent adoption of cybersecurity contractual requirements
• Partner with Cybersecurity, Legal, Procurement, and business stakeholders to support policy alignment, regulatory initiatives, training, and continuous program improvement.

Compensation and Benefits:

• The expected compensation range for this position is between $93,500 - $156,450.
• Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.
• Bonus based on performance and eligibility target payout is 10% of annual salary paid out annually.
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.
• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

• 5-8 years of experience in Cybersecurity Governance, GRC, Information Security, Contract Governance, or a related field, with the ability to translate cybersecurity requirements into business and contractual obligations.
• Strong knowledge of cybersecurity governance frameworks, contractual risk management, and stakeholder engagement across Legal, Procurement, and business functions.
• Bachelor's degree in a related discipline required; advanced degree, cybersecurity certifications, experience with governance platforms (e.g., ServiceNow, Icertis), and proficiency with Microsoft 365 applications and Copilot preferred.

Our Company will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Credit Reporting Act, and all other applicable laws, including but not limited to, San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance; and Chapter XVII, Article 9 of the Los Angeles Municipal Code, commonly referred to as the Fair Chance Initiative for Hiring Ordinance.All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.PepsiCo is an Equal Opportunity Employer: Female / Minority / Disability / Protected Veteran / Sexual Orientation / Gender Identity / AgeIf you'd like more information about your EEO rights as an applicant under the law, please download the available EEO is the Law & EEO is the Law Supplement documents. View PepsiCo EEO Policy.Please view our Pay Transparency Statement.