OT Cybersecurity Compliance Specialist

Overview

OT Cybersecurity Compliance Specialist role partners with sector cyber risk owners to drive sector supply chain compliance to Cybersecurity Policy and OT-specific standards and controls. This role will ensure OT controls testing and compliance initiatives are completed and will guide risk owners through the Cybersecurity OT Issues and Exceptions process. The role will provide support for process improvement initiatives through analysis, documentation, and testing.

Responsibilities

The OT Cybersecurity Compliance Specialist role partners with sector cyber risk owners to drive sector supply chain compliance to Cybersecurity Policy and OT-specific standards and controls. This role will ensure OT controls testing and compliance initiatives are completed and will guide risk owners through the Cybersecurity OT Issues and Exceptions process. The role will provide support for process improvement initiatives through analysis, documentation, and testing.

• Provide training and insights to Sector OT Leads on OT cybersecurity standards, controls, compliance, metrics, and reporting
• Partner with OT Sector Leads to drive compliance to PepsiCo OT-specific standards and controls
• Monitor and drive control testing at local plants (i.e., anti-virus, system patching, backups, recovery and reconstitution, asset inventory)
• Guide OT Sector Leads to submit and monitor information security exceptions and risk remediations
• Review supplier compliance to PepsiCo standards and services; recommend performance improvements
• Partner with InfoSec to provide OT-specific requirements related to process design and modifications
• Analyze OT cybersecurity metrics; Provide report requirements that identify sector cyber risks
• Ensure OT reporting and dashboard metrics are accurate through data validation
• Provide manager insight to sector and plant risk issues and risk mitigations; Recommend actions for improvement

• The expected compensation range for this position is between $89,000 - $149,000
• Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process
• Bonus based on performance and eligibility target payout is 10% of annual salary paid out annually
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement
• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan

• Minimum of bachelor's degree (BA or BS) in any related field is required
• 3+ years of Cyber/Information Security or OT/Manufacturing operations
• 3+ years working with policy and standards (e.g. IEC 62443/ISA 99, NIST SP 800-82, NIST SP 800-53, NIST CSF, ISO27001, COBIT)
• 3+ years of experience in governance, compliance, and risk processes, or audit assessments
• Proficiency in assessing and managing risks, including identifying vulnerabilities, evaluating potential threats, and implementing risk mitigation strategies.
• Proficiency in analyzing and interpreting data related to compliance audits, assessments, and monitoring activities.
• Proficient in Microsoft suite of tools - Excel (pivot tables), Word, PowerPoint, Power BI
• Proficient in search engines and research
• Experience partnering and collaborating with global teams having various responsibilities
• Ability to drive results and build consensus with internal and external stakeholders
• Strong process efficiency and procedure development skills
• Excellent verbal and written communication skills
• Exceptional analytical and problem-solving skills
• Preferred: CISM, CISSP, ISA/IEC 62443 certification