Staff IT Security Consultant

Position Summary

As a Business Information Security Officer (BISO) supporting Yum! Brands, you will serve as the primary cybersecurity advisor and relationship owner for one or more Brands, Markets, or Product organizations. You will partner with business and technology leaders to help them achieve their objectives securely by translating cyber risk into practical business decisions and coordinating the right cybersecurity capabilities at the right time.

Success comes from building trusted relationships, understanding business priorities, and enabling informed, risk-based decisions. The BISO also helps leaders adopt emerging technologies, including AI, by balancing innovation with appropriate governance and security.

Qualifications

- 7+ years of experience in cybersecurity, information technology, risk management, or a related field with at least 2 years in a leadership role.
- Strong relationship-building, communication, and executive presentation skills.
- Ability to influence cross-functional teams without direct authority.
- Strong organizational skills with the ability to manage multiple priorities while adapting to changing business needs.
- Experience translating complex technical issues into practical business recommendations.
- Working knowledge of cloud security, application security, identity and access management, enterprise risk management, AI technologies, AI governance principles, and modern software delivery practices.
- Familiarity with security frameworks such as NIST, PCI DSS, ISO 27001, SOC 2, or similar.
- Restaurant, retail, digital commerce, or customer-facing technology experience is preferred.

What We're Looking For

The ideal BISO is a business partner first and security expert second—curious, collaborative, pragmatic, and focused on understanding business objectives before recommending solutions.

We are looking for someone who believes cybersecurity exists to enable the business—not slow it down . Rather than defaulting to enforcement, they help leaders understand risk, present practical options, explain tradeoffs, and support informed business decisions.

Successful candidates build trust through sound judgment, flexibility, and strong relationships.

Education & Certifications

- Bachelor's degree in Information Security, Computer Science, or a related field (or equivalent experience).
- CISSP, CISM, CISA, or similar certifications are preferred but not required.

Salary Range: $151,600 to $178,400 annually + bonus eligibility. This is the expected salary range for this position. Ultimately, in determining pay, we'll consider the successful candidate’s location, experience, and other job-related factors.