[Hiring] Market Information Security Officer @Yum!

Role Description

As Market Information Security Officer (ISO) supporting Yum! Brands, and as part of the Yum! Global Cybersecurity team, you will serve as the primary security leader for one or more markets, acting as a strategic liaison between the business and the enterprise cybersecurity function.

As Market ISO, you are responsible for ensuring that security policies, standards, and practices align with business objectives while effectively managing cyber risks. This role will drive security awareness, risk mitigation and compliance efforts within the business unit, partnering with stakeholders to embed security into processes, products and services.

Qualifications

• 10+ years of progressive experience in cybersecurity, risk management or related discipline, with at least 2 years in a leadership role.
• Excellent communication and stakeholder management skills with the ability to convey complex security concepts to non-technical audiences, including business executives.
• Strong collaboration skills with a history of building cross-functional relationships between business, IT, and security teams.
• Deep understanding of ecommerce platform technologies and architectures (e.g., web applications, APIs, payment systems, mobile apps, content delivery networks).
• Strong knowledge of security threats, attack vectors, and mitigation strategies specific to ecommerce and other digital environments, including DDoS mitigation, secure payment processing, and data privacy.
• Strong expertise in securing cloud environments, including Identity and Access Management, cloud-native security tools, data protection, logging/monitoring, and compliance frameworks (CIS Benchmarks, ISO 27017).
• Experience securing restaurant networks and other restaurant technologies preferred.
• Familiar with incident response processes and incident response table-top exercises.
• Experience with common security metrics, security reporting, and management dashboards.
• Good understanding of security frameworks, compliance requirements, and industry best practices (PCI Controls, SANS 20 Security Controls, NIST 800-53, SOC 2 Type II, ISO 27001/02 etc.).

Requirements

• Bachelor’s degree in Information Security, Computer Science or a related field.
• Relevant certifications such as – CISM, CISA, CISSP are a plus.

Benefits

• Salary Range: $157,100 to $203,300 annually + bonus eligibility.
• This is the expected salary range for this position. Ultimately, in determining pay, we’ll consider the successful candidate’s location, experience, and other job-related factors.