Info Security Assoc Specialist

Information Security Associate Manager

The Information Security Associate Manager will provide technical support and execution on a range of critical network security products, serve as a point of contact for all security product deployment, configuration, upgrades, and related events. This role will also serve as a mentor to IT staff and work to help standardize and improve processes and procedures.

Responsibilities

Works in support of the Senior Information Security Manager to enhance the security direction for the organization including network infrastructure, perimeter defense, internal network controls, user services, and vendor development efforts.

Strategize AOP plans for Network Security architecture and toolsets.

Provides technical support for day-to-day security operations, change management, and business continuity programs related to network security infrastructure.

Troubleshoots network security systems and related issues (e.g., firewalls, IDS/IPS, VPNs, proxies, NAC).

Assists with complex projects and assumes ongoing support of network security operations.

Conducts network and system penetration tests, vulnerability assessments, and simulations to identify weaknesses that may be exploited.

Designs, implements, supports, and evaluates network security-focused tools and services, including firewall platforms, intrusion detection systems, and network segmentation solutions.

Designs, implements, supports, and evaluates vulnerability management and patching solutions across the network.

Provides network security tool integration and automation support.

Assists in defining network security requirements and reviews systems to determine if they comply with established network security standards; helps develop new standards as necessary.

Participates in security compliance efforts (e.g., PCI DSS, SOX, ISO 27001) with a focus on network infrastructure.

Participates in incident handling, especially where network-level compromise or attack is suspected.

Performs other related duties to support the broader information security function.

Compensation and Benefits

The expected compensation range for this position is between $89,000 - $149,000.

Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.

Bonus based on performance and eligibility target payout is 10% of annual salary paid out annually.

Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.

In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

Education:

Bachelor's degree in Computer Science, Information Security, or equivalent work experience.

Experience:

Ten or more years of experience in the design and implementation of network security solutions and technologies.

Demonstrated effectiveness working across multiple business units to achieve results.

Significant technical expertise in one or more of the following areas:

Firewalls (Palo Alto, Cisco, Fortinet)

DNS Security

Deep packet inspection

IDS/IPS platforms

VPNs and Remote Access Security

Network Access Control (NAC)

Security Information and Event Management (SIEM)

Network segmentation, monitoring, and forensics tool

Nice to Have:

Operational knowledge of programming languages and scripting (Python, Ruby, PowerShell, Bash, etc.)

Familiarity with Windows, Linux, and Mac operating systems in relation to network integration and security.

Exceptional problem-solving, communication, and customer service skills.

Highly self-motivated and directed.

Certifications:

Industry certifications preferred: CISSP, CCNA Security, CCNP Security, CEH, GIAC (e.g., GSEC, GCIA), CompTIA Security+, TOGAF