Staff IT Security Consultant

KFC•Plano, TX

About The Position

As a Business Information Security Officer (BISO) supporting Yum! Brands, you will serve as the primary cybersecurity advisor and relationship owner for one or more Brands, Markets, or Product organizations. You will partner with business and technology leaders to help them achieve their objectives securely by translating cyber risk into practical business decisions and coordinating the right cybersecurity capabilities at the right time. Success comes from building trusted relationships, understanding business priorities, and enabling informed, risk-based decisions. The BISO also helps leaders adopt emerging technologies, including AI, by balancing innovation with appropriate governance and security. The ideal BISO is a business partner first and security expert second: curious, collaborative, pragmatic, and focused on understanding business objectives before recommending solutions. The role enables the business through sound judgment, flexibility, practical options, clear explanations of tradeoffs, and support for informed business decisions.

Requirements

7+ years of experience in cybersecurity, information technology, risk management, or a related field, including at least 2 years in a leadership role.
Strong relationship-building, communication, and executive presentation skills.
Ability to influence cross-functional teams without direct authority.
Strong organizational skills and ability to manage multiple priorities while adapting to changing business needs.
Experience translating complex technical issues into practical business recommendations.
Working knowledge of cloud security, application security, identity and access management, enterprise risk management, AI technologies, AI governance principles, and modern software delivery practices.
Familiarity with security frameworks such as NIST, PCI DSS, ISO 27001, SOC 2, or similar.
Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent experience.

Nice To Haves

Restaurant, retail, digital commerce, or customer-facing technology experience.
CISSP, CISM, CISA, or similar certifications.

Responsibilities

Serve as the trusted cybersecurity advisor to assigned business and technology leaders.
Build strong relationships and maintain a deep understanding of business priorities, technology roadmaps, and strategic initiatives.
Translate cybersecurity risks and technical concepts into clear business guidance for executives and stakeholders.
Partner with business teams to identify, prioritize, and reduce cyber risk while balancing business value, customer experience, cost, and delivery speed.
Coordinate cross-functional collaboration involving cybersecurity and non-technical teams to deliver a business experience consistent with the Global Business Information Security Office.
Enable responsible AI adoption by coordinating AI governance and security guidance with the appropriate cybersecurity teams.
Embed cybersecurity into projects, products, and strategic initiatives early and throughout the lifecycle.
Lead governance activities by tracking business risks, audits, security initiatives, executive reporting, policy exceptions, incident response, and resilience exercises.
Foster a positive security culture by building trust, promoting collaboration, and helping teams make risk-informed decisions.
Support franchisee- and third-party-facing security initiatives.