Responsibilities

The opportunity

The Global Cyber OT Risk Analyst role will be responsible for designing and maintaining the annual OT (Operational Technology) risk management operating model. This role will collaborate with the Information Security Policy and Standards team to update OT specific standards; develop, maintain, and test key cybersecurity controls for manufacturing plants. This role will ensure OT controls testing and compliance initiatives are completed. The role will provide support for process improvement initiatives through analysis, documentation, and testing.

Your Impact

As The Global Cyber OT Risk Analyst your scope will consist of: 

• Design, develop, and operationalize the annual OT risk management process
• Develop and manage OT control lifecycle including control review and approval; develop a roadmap with recommendations for improvements
• Collaborate with stakeholders to update existing controls, create new controls, conduct testing, and report results
• Partner with OT BISO leads to ensure OT controls testing and compliance initiatives are completed
• Participate in Information Security standards review process to provide updates to OT-specific requirements
• Advise OT BISO team on risk issues related to information security and recommend actions in support of risk management programs
• Collaborate with OT Services Lead to drive service partner compliance to PepsiCo standards and controls
• Provide insight to risk mitigation initiatives
• Analyze OT cybersecurity metrics; Provide report requirements that identify global and sector cyber risks

Experience:

• 3+ years security control development
• 3+ years policy and standards development

Tech skills:

• Proficient in Microsoft suite of tools - pivot tables in Excel, Visio, Word, PowerPoint, etc.
• Proficient with search engines and conducting research

Non tech skills:

• Experience partnering and collaborating with global teams having various responsibilities
• Possess strong understanding of data privacy, regulations, and laws and how they apply to cybersecurity controls
• Working knowledge of control development processes including design, documentation, testing, and maintenance
• Working knowledge of policy and standards development processes including development and maintenance of OT-specific policy and standard requirements
• Excellent oral and written communication skills
• Exceptional analytical and problem-solving skills

Competencies:

• Strong people skills communicating across different experience levels
• Ability to drive results and build consensus with stakeholders
• Ability to analyze situations, evaluate multiple perspectives, collect evidence, ask questions and use critical thinking skills
• Ability to work in a fast-paced environment