Cybersecurity GRC Assoc Principal

PepsiCo•Plano, TX

7d•$93,500 - $156,450

About The Position

The GRC Associate Principal supports the execution and operational management of PepsiCo's Global Information Security Requirements (GISR) program and governance of PepsiCo's third-party cybersecurity obligations. This role partners with Cybersecurity, Legal, Procurement, and business stakeholders to ensure cybersecurity requirements are incorporated into third-party agreements, monitor compliance with contractual cybersecurity obligations, and provide metrics and reporting that support risk management, regulatory compliance, and program effectiveness. The position also helps drive alignment between cybersecurity policies, contractual requirements, and third-party governance processes.

Requirements

5-8 years of experience in Cybersecurity Governance, GRC, Information Security, Contract Governance, or a related field, with the ability to translate cybersecurity requirements into business and contractual obligations.
Strong knowledge of cybersecurity governance frameworks, contractual risk management, and stakeholder engagement across Legal, Procurement, and business functions.
Bachelor's degree in a related discipline required

Nice To Haves

advanced degree
cybersecurity certifications
experience with governance platforms (e.g., ServiceNow, Icertis)
proficiency with Microsoft 365 applications and Copilot

Responsibilities

Manage the execution of PepsiCo's GISR contract governance program, including contract reviews, cybersecurity requirement assessments, and negotiation support.
Maintain governance processes, controls, reporting, and compliance activities to ensure consistent adoption of cybersecurity contractual requirements
Partner with Cybersecurity, Legal, Procurement, and business stakeholders to support policy alignment, regulatory initiatives, training, and continuous program improvement.