"Alerted.org

Job Description

Who will you be working with?

You will collaborate with cross-functional teams, including business, engineering, product, and IT stakeholders, to identify, assess, and mitigate cybersecurity risks. This role partners closely with leadership to integrate risk considerations into decision-making processes.

How will you make a difference?

Lead risk/control assessments, prioritize security threats, analyze control effectiveness, and implement mitigation strategies. Drive a risk-aware culture, establish KPIs, and continuously improve the risk management framework to address emerging threats.

What do we want to know about you?

• Bachelor’s degree in Business, Technology, Cyber Security, Technology Risk Management or related field, or equivalent hands-on experience. Master’s degree preferred.

• 6+ years of experience in Security & Risk Management.

Knowledge, Skills and Abilities:

• Strong analytical and problem-solving skills; ability to prioritize effectively

• Knowledge of industry risk management frameworks, baseline control creation, common mitigation practices, control assessment, and risk acceptance processes

• Familiarity with hardening guidelines (CIS benchmarks, DISA STIGs, etc.)

• Ability to describe controls effectively to all levels of the organization

• Ability to analyze evidence and determine effectiveness

• Ability to review and understand technical architecture diagrams

• Proficiency in process formulation and improvement

• Knowledge of operational security capabilities, including access control, network security, secure configuration and vulnerability management, intrusion detection, security monitoring, and incident response

• Strong written and oral communication skills with the ability to effectively communicate status, risks, and remediations to executive management

• Experience in manufacturing industry a plus

What will your typical day look like?

Risk Identification, Assessment, Analysis and Mitigation Strategy:

- Lead risk/control assessments to identify and prioritize security threats across systems.

- Prioritize and categorize identified risks based on potential impact and likelihood.

- Analyze the effectiveness of existing controls and recommend improvements.

- Collaborate with stakeholders to formulate risk treatment plans and mitigation strategies aligned with business objectives.

- Implement and oversee the execution of risk remediation initiatives.

Control Assessment and Effectiveness:

- Develop and maintain a comprehensive inventory of security controls.

- Perform gap analysis between existing controls and industry best practices or regulatory requirements.

- Implement processes to regularly evaluate the effectiveness of existing security controls and recommend improvements as needed.

- Collaborate with relevant teams to enhance or implement new controls based on assessment findings.

- Develop and maintain a risk acceptance process.

Risk-Aware Culture Cultivation:

- Drive pragmatic outcomes, balancing risk with business objectives.

- Establish channels for risk reporting and feedback from employees across departments.

- Develop scorecard methodologies for communicating risk.

- Collaborate with leadership to integrate risk considerations into decision-making processes.

Continuous Improvement and Adaptation:

- Establish metrics and KPIs to measure the effectiveness of the risk management program.

- Regularly review and update the risk management framework to address emerging threats.

- Stay informed on industry best practices and regulatory changes to enhance the program.

- Foster partnerships with business and IT stakeholders.

What about the physical demands of the job?

Work is predominantly performed in an office environment and requires the ability to operate standard office equipment. Ability to be in a seated position for long periods of time.

This position is not eligible for relocation assistance.

Additional Information

Our job titles may span more than one career level. The salary rate for this role is currently $77400-110300 The actual salary offered to a candidate may be influenced by a variety of factors, such as: training, transferable skills, work experience, education, business needs, market demands and work location. The base pay range is subject to change and may be modified in the future. More information on offered benefits, which include health, welfare, and retirement, are available at mywabtecbenefits.com. Other benefit offerings for this role may include annual bonus, if eligible.

What could you accomplish in a place that puts People First?

At Wabtec, it’s not just about a job - it’s about the impact you make. When our people come together, we’re Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you.

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together – are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.

Culture powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We’re building a culture where leadership, inclusion and your unique perspective fuel progress.

We’re proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we’ve got you.