Note: The job is a remote job and is open to candidates in USA. Cummins Inc. is seeking a Senior Cybersecurity Risk Analyst to support its cybersecurity framework, policies, standards, and baselines. The role leads cybersecurity risk identification and mitigation, advises on technology solutions, applies industry frameworks and standards, coaches team members, and collaborates with stakeholders as a trusted business partner.
Responsibilities
- Understands and applies Cummins cybersecurity policies and industry data privacy principles. Leads cybersecurity risk identification utilizing identified Cummins risk management frameworks while providing guidance to the team to evaluate severity and mitigation plans. Coaches and develops less experienced team members. Understands and applies frameworks and standards (eg NIST, ISO, ITIL, Cobit) in a manner specific to Cummins processes and controls. Provides cybersecurity technical expertise for technology solutions. Collaborates with stakeholders on requests for new and changing technology solutions, acting as a trusted business partner and advisor. Maintain strong relationships to deliver business value using relevant Business Relationship Management practices
- Action oriented - Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm
- Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders
- Business insight - Applying knowledge of business and the marketplace to advance the organization’s goals
- Ensures accountability - Holding self and others accountable to meet commitments
- Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems
- Organizational savvy - Maneuvering comfortably through complex policy, process, and people-related organizational dynamics
- Persuades - Using compelling arguments to gain the support and commitment of others
- Resourcefulness - Securing and deploying resources effectively and efficiently
- Tech savvy - Anticipating and adopting innovations in business-building digital and technology applications
- Training Delivery - Instructs learners in a manner that engages and adjusts to individual and group needs resulting in knowledge, skills and abilities that can be applied on the job
- Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives
- Regulatory Risk Compliance Management - Evaluates the design and effectiveness of controls against established industry frameworks and regulations to assess adherence with legal/regulatory requirements
- Values differences - Recognizing the value that different perspectives and cultures bring to an organization
Skills
- College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required
- Intermediate level of relevant work experience required
- 3-5 years of experience
- Experienced 3rd Party Assessors
Benefits
- Off-site remote work
Company Overview
Company H1B Sponsorship