Senior Manager - Cloud Vulnerability Management Services

Overview

The Vulnerability Management Services Sr Analyst will support the remediation of Cloud security vulnerabilities globally. The role will work closely with Information Security, as well as infrastructure, application and IT management teams.

Responsibilities

• Act as Cloud patching and vulnerability remediation subject matter expert
• Implement best practices for automated Cloud patch management and deployment
• Collaborate with infrastructure and application teams to address the end-to-end Cloud patching process
• Collaborate with the Information Security team to identify initiatives, develop remediation strategies, and report on vulnerability reduction
• Analyze data to identify potential patch-related issues on golden images and lead remediation efforts with the corresponding teams
• Monitor for vulnerabilities, threats and remediation
• Oversee the testing of patches and patch remediation
• Verify vulnerability remediation through vulnerability scanning and reporting
• Develop automation scripts to improve manual targeted patching activities (e.g., corrupt software)
• Lead troubleshooting/incident, knowledge, change, problem and request management for Cloud patching
• Partner with business, IT backline teams and other technology partners to prioritize security patching of critical global infrastructure
• Partner with external vendors to ensure PepsiCo expectations and needs are met
• Partner with infrastructure and/or IT support team management (App, Compute, DB, Network) to ensure the number of high and critical vulnerabilities is reduced
• Provide quality assurance of services and ensures the team meets expectations
• Ensure compliance with key patching, vulnerability and security controls
• Fluent English required (oral and written)
• 9-11 years of total experience
• 8+ years of Cloud vulnerability OR administration management
• Experience with Cloud environments (e.g., Azure, AWS, GCP)
• Strong scripting experience (e.g., PowerShell, Python)
• Experience communicating with technical audience in high-availability critical environments
• Experience supporting complex technical solutions