Cybersecurity GRC (Governance, Risk Management, Compliance) Sr Analyst
Core
Assess third-party information security risks, manage assessment intake, and drive compliance for PepsiCo's global third-party engagements.
Role type
Senior GRC Analyst (Third-Party Risk Management)
Builds
Risk ratings, mitigation strategies, and compliance reports for third-party vendors.
Domain
Cybersecurity / Third-Party Risk Management / GRC
Required skills
GRC tools (Archer, ServiceNow), risk assessment, stakeholder communication, technical infrastructure knowledge, data analysis (Excel, PowerPoint), process management
Preferred skills
CISSP, CISA, CRISC, CISM, CGEIT certifications
Technologies
Archer, ServiceNow, Microsoft Excel, Microsoft PowerPoint
Responsibilities
Assess third-party security inherent risks and prioritize detailed assessments; manage work intake requests and coach requestors; conduct functional and technical risk assessments to generate risk ratings; monitor team performance and report metrics; present findings to stakeholders; partner with third parties on mitigation solutions.
Seniority
Senior, hands-on IC
