Security Engineer

Yum Brands; Seattle (WA); On-site; USD 112,000 - 120,000; Full time

Benefits offered by this job

401(k) with 6% matching

4 weeks vacation per year

Onsite childcare

Onsite gym

Tuition reimbursement

Comprehensive medical, vision and dent

Job summary

Yum! Brands, Inc. is seeking a seasoned Global Technology Risk Management professional to advise business leaders on cybersecurity and regulatory compliance.

You will partner with divisions to identify cyber risks, implement security services, and secure digital and eCommerce platforms across a global organization. The role involves on-call duties and cross-functional collaboration with security professionals.

Qualifications

• Bachelor's degree preferred and/or minimum 5 years in cybersecurity disciplines.
• Maintain at least one internationally recognized cybersecurity certification (CISSP, CISM, CEH, or Security+).
• Able to communicate with technical and non-technical partners and collaborate across a global team.

Responsibilities

• Partner with business leaders to understand strategic objectives and security needs.
• Lead IT systems risk assessments and control validation.
• Provide guidance on data protection, access controls, incident response, and compliance (GDPR, NIST, PCI-DSS).
• Coordinate stakeholders to socialize IT risk management and data privacy improvements.
• Perform security architecture guidance and threat modelling; report on security KPIs and audits.

Skills

Communication

Global team experience

Stakeholder engagement

Education

Bachelor's degree

Cybersecurity certifications (CISSP/CISM/CEH/Security+)

Job description

As a member of our Yum! Global Technology Risk Management team (GTRM), you will serve as a trusted advisor to business leaders, providing guidance, expertise, and support to ensure the effective implementation of security measures and compliance with regulatory and organization security requirements. You will partner with Yum!’s divisions and brands to identify and evaluate cyber risks and support the implementation of established security services. You will have the opportunity to be involved in securing Digital and eCommerce platforms for our Global business and positively engaging interactions with members of the Digital and Technology team and constructively collaborate with other highly regarded security professionals from the Global Technology Risk Management team. While working in a dynamic, global environment, you will be responsible for researching and tracking information security technologies and processes and use your technical knowledge to help enhance the security posture of our owned Digital and eCommerce platforms. Occasional outside normal business hours and on-call duties may be required.

Salary Range: $112,000 - $120,000 annually + bonus eligibility.

Responsibilities

• Partner with business leaders and stakeholders to understand their strategic objectives, priorities, and security needs.
• Align with a risk-based approach, work with product teams to evaluate and clearly communicate security risks and remediations to business and technology stakeholders.
• Lead and oversee IT systems risk assessments and control validation.
• Provide guidance and support on security-related matters, including data protection, access controls, incident response, and compliance requirements (e.g., GDPR, NIST, PCI-DSS).
• Assist in coordinating stakeholders to socialize and drive change regarding IT compliance, IT risk management and data privacy.
• Leverage experience to provide security architectural advice and guidance.
• Participate in threat modelling to ensure the right security services are implemented against the right risks, and effectively communicate risks to appropriate stakeholders.
• Monitor and analyze security metrics and key performance indicators (KPIs), identifying trends, issues, and areas for improvement, and recommending remedial actions as needed.
• Conduct regular security audits of our digital platforms, applications, and network infrastructure to identify vulnerabilities, risks, and areas for improvement.
• Prepare IT security reports, trackers, and dashboards.

Requirements

• Bachelor's degree preferred and/or minimum 5 years of working experience in relevant cybersecurity disciplines with multiple teams/projects concurrently.
• Maintain at least one internationally recognized cybersecurity certification, to include but not limited to CISSP, CISM, CEH, or Security+.
• Able to successfully communicate with technical and non-technical partners.
• Experience working in a global team spanning multiple locations preferred.

Technical Qualifications

• Knowledge of cloud environment topics including secrets management, infrastructure as code, and serverless technologies.
• Experience in designing and deploying common enterprise security services and processes, including, but not limited to: Identity and Access Management, Privileged Access Management, Network and Firewall Security, Endpoint Protection, Certificate and Key Management, Data Protection/Privacy, Website Security, SOC/SEIM, and Vulnerability Management.
• Knowledge of Web Application Firewalls and HTTP communication.

Employment eligibility to work with Yum! in the U.S. is required as the company will not pursue visa sponsorship for this position.

Yum! Brands, Inc. is an equal opportunity employer and is committed to equity, inclusion, and belonging for all dimensions of diversity. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other protected characteristic. Yum! is committed to working with and providing reasonable accommodation to applicants with disabilities or special needs.

Benefits

• Recognition based culture and unique, fun events year round.
• 401(k) with a 6% matching contribution from Yum! Brands with immediate vesting.
• 4 weeks of vacation per year plus holidays.
• Onsite childcare through Bright Horizons.
• Onsite dining center.
• 2 paid days off per year to volunteer.
• Tuition reimbursement, education benefits and scholarship opportunities.
• Healthcare and dependent care flexible spending accounts.
• Company paid life insurance.
• Generous parental leave for all new parents and adoption assistance program.
• Onsite dry cleaning, laundry services, concierge.
• Onsite gym with fitness classes and personal trainer sessions.
• Discounts for life’s adventures (e.g., theme parks, wireless plans).
• Comprehensive medical, vision and dental including prescription drug benefits and 100% preventive care.
• Grow Yourself Week which is devoted to your personal development.