Cybersecurity Incident Management Commander

PepsiCo • Plano, TX

1d • Hybrid

About The Position

You have the opportunity to coordinate and lead PepsiCo’s response to high-impact cybersecurity incidents. This role is responsible for maintaining and evolving PepsiCo’s cybersecurity incident response plan, conducting tabletop exercises, managing third-party incidents, and providing timely awareness and communication to executive leadership during significant cyber incidents and emerging threats. The Cybersecurity Enterprise Incident Commander partners closely with Cybersecurity teams, Infrastructure, Platform, Legal, Communications, and business stakeholders to ensure effective response, recovery, and business continuity throughout the incident lifecycle. This position drives continuous improvement through lessons learned and alignment with industry frameworks and best practices.

Requirements

• 7+ years of experience in Information Security, Cybersecurity Operations, Incident Response, Threat Management, or a related discipline, including at least 5 years focused on cybersecurity incident response or investigations
• Demonstrated experience managing complex cybersecurity incidents throughout the full incident lifecycle, from initial detection through containment, eradication, recovery, and post-incident review
• Experience leading enterprise-scale cybersecurity incidents or investigations involving multiple stakeholders, technologies, and business functions
• Experience managing incidents involving ransomware, advanced persistent threats (APT), DDoS, third-party compromise, intrusion activity, vulnerability exploitation, and data exfiltration
• Proven experience working successfully within a large, global, highly matrixed organization
• Demonstrated ability to coordinate and influence cross-functional teams and stakeholders without direct reporting authority
• Strong leadership, decision-making, and risk management capabilities, with the ability to maintain a professional presence in high-pressure and high-visibility environments
• Strong understanding of networking, operating systems, identity and access management technologies, cloud platforms, and cybersecurity concepts
• Familiarity with cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), NIST Incident Response guidance, and related industry best practices
• Outstanding written and verbal communication skills, with the ability to clearly communicate complex technical concepts to executives and non-technical audiences
• Exceptional organizational and prioritization skills, with the ability to manage multiple concurrent incidents, investigations, and competing priorities
• Bachelor’s degree in Computer Science , Cybersecurity, Information Technology, or a related discipline

Nice To Haves

• Experience coordinating cyber incidents and investigations with legal counsel, incident response vendors, internal stakeholders, cyber insurance providers, law enforcement, and third-party vendors or partners
• Experience developing and facilitating technical, business, and executive tabletop exercises
• Experience managing third-party and software supply chain cybersecurity incidents
• Knowledge of security, privacy, legal, and regulatory considerations associated with cybersecurity incidents
• Relevant certifications such as CISSP, CISM, GCIH, or equivalent industry certifications

Responsibilities

• Serve as the Enterprise Cybersecurity Incident Manager for high-profile cybersecurity incidents and coordinate response activities throughout the incident lifecycle in partnership with global incident managers and the Cyber Security Incident Response Team (CSIRT)
• Manage cybersecurity incident response activities within a highly matrixed global organization, coordinating and influencing stakeholders across multiple functions to drive timely decision-making and response actions
• Coordinate communications and response efforts among Cybersecurity, Infrastructure, Compute, Platform, Legal, Communications, and business teams to ensure effective incident response and business continuity
• Develop, maintain , test, and continuously improve incident management methodologies, playbooks, runbooks, and escalation processes to address current and emerging cyber threats and ensure consistent and effective enterprise response capabilities
• Provide timely , accurate , and actionable updates to executive stakeholders and business leaders throughout the incident lifecycle
• Develop, facilitate , and document technical, business, and executive tabletop exercises to validate preparedness, improve resilience, and strengthen organizational readiness
• Conduct after-action reviews and lessons-learned activities following incidents and exercises, providing insights and driving continuous improvement initiatives to strengthen PepsiCo’s security posture, operational resilience, and business continuity capabilities
• Coordinate the response to third-party and supply chain cybersecurity incidents, working closely with internal stakeholders, external partners, and service providers
• Manage relationships and engagements with incident response vendors, forensic consultants, and other third-party response partners
• Manage multiple concurrent cybersecurity incidents and investigations, prioritizing activities based on business impact, organizational risk, and operational requirements
• Ensure incident management processes, plans, and activities align with established cybersecurity frameworks, enterprise policies, and industry best practices
• Develop and report key metrics related to incident management performance, preparedness, and program maturity

Benefits

• Bonus based on performance and eligibility target payout is 12% of annual salary paid out annually.
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.
• Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior