The posting
Overview Applications are invited for the temporary position of Cybersecurity GRC Assoc Principal (PGCS IT Controls Lead) within the PGCS division of PepsiCo, based in Carrigaline, Cork, Ireland. This role manages a team of 4-5 individual controls specialists, reporting to the PGCS Cybersecurity and Compliance Director, based in Ireland. This role manages the creation, deployment, governance and performance of multiple IT controls across the landscapes of Enterprise IT, Manufacturing IT and Legacy Applications IT. This role applies and adheres to PepsiCo’s global controls requirements and business priorities driven by the PepsiCo Global Controls Team while managing associated controls risk and compliance reporting. Who We are: We are the concentrate team in PepsiCo (PGCS) working across the Beverage, Nutrition and Snacks categories to deliver concentrate for many of PepsiCo’s mega brands including Gatorade, 7Up and Pepsi. We are at the heart of PepsiCo products, sourcing ingredients to manufacture more than 1,200 recipes for our brands. We are a global organisation, situated in 15 locations across 6 countries offering careers in various functions from Manufacturing, Supply Chain, Procurement, Quality, Finance, R&D, HR and IT. We collaborate in our fast-paced global organisation and are passionate about creating and delivering much-loved household brands to markets across the world. Responsibilities The primary responsibility of this role is to manage the performance of IT, Manufacturing OT and Legacy Applications controls, governance, risk and compliance across PGCS. This role applies and adheres to PepsiCo’s global controls requirements and business priorities driven by the PepsiCo Global Controls Team. The role is also responsible in the controls and compliance area with duties including process owner for both local and global security controls. The role will require management of audits and involves collaboration with the business controls teams. The role will include supporting the SAP application controls as well as other security applications and tools. IT Controls Lead for PGCS, managing SOX and NON SOX controls for the SAP environment, legacy applications and OT space. Manage a team focused on risk, compliance, and controls assurance. Manage the execution of daily/weekly/monthly controls. Process owner for local and global System Security SOX and NON SOX controls. Reporting controls on a quarterly and annual basis to IT & Business senior leadership. Lead quarterly self‑testing of controls, internal corporate and external audits, and drive resolution to audit findings. Working with the control and process owners as well as business controls, technical and functional IT teams to execute against remediation and improvement plans. Manage the Application Risk Assessment (ARA) process for PGCS, ensuring remediation of non‑compliant risks and the compliance to Global Security Standards and Policies across the PGCS sites. Partner with the Global Controls CoE, PGCS business controls and the Cyber Security teams to drive compliance. Provide governance support to local IT teams on security and access control requirements. Collaborating with local, sector and global teams in the identification and documentation of IT risks and implementing processes and controls. Manage control initiatives and changes for PGCS Qualifications 5+ years of IT-based compliance or risk experience Demonstrated ability in people management Proven track record engaging and supporting internal and external Auditors Experience and knowledge of Cyber Security Experience of IT Sarbanes Oxley (SOX) controls Must be well-organised and capable of multi-tasking and able to work to tight deadlines Good interpersonal skills and a high degree of professionalism High levels of enthusiasm and energy and works well in a team environment. Ability to work independently as well as part of a team Excellent verbal and written communication skills Good organizational and coordination skills IT qualification desirable Cyber security accreditation desirable At PepsiCo, opportunity is for everyone. Being recognised as a Great Place to Work in Ireland, highlights how PepsiCo has become a workplace where we foster a culture of diversity, equity and inclusion with acceptance and respect for all employees. ‘A space to be you’ is our initiative that creates a collaborative, equitable and inclusive space where everyone, regardless of what we look like, where we come from or who we love, has a voice. We make reasonable accommodations for our employees and create a supportive work environment that provides a sense of community for employees who may otherwise feel marginalized or isolated. pep+ (PepsiCo Positive) is the future of our company. It’s the core strategy that will guide how our business will grow for decades to come, all while having a positive impact on the planet and people. For the purposes of external advertising we have called this role an IT Controls, Risk & Compliance Lead. However please note that the internal job title the successful candidate will be Cybersecurity GRC Assoc Principal. For more information, scroll down to MORE FROM PEPSICO or visit www.pepsico.com.
