Note: The job is a remote job and is open to candidates in USA. Cummins Inc. is seeking a Supply Chain Cyber Risk Analyst to support its cybersecurity framework and risk requirements. The role leads cybersecurity risk identification, evaluates vendor and technology risks, guides mitigation planning, applies industry frameworks and standards, and collaborates with cross-functional stakeholders on technology initiatives.
Responsibilities
- Understands and applies Cummins cybersecurity policies and industry data privacy principles
- Leads cybersecurity risk identification utilizing identified Cummins risk management frameworks while providing guidance to the team to evaluate severity and mitigation plans
- Coaches and develops less experienced team members
- Understands and applies frameworks and standards (eg NIST, ISO, ITIL, Cobit) in a manner specific to Cummins processes and controls
- Provides cybersecurity technical expertise for technology solutions
- Collaborates with stakeholders on requests for new and changing technology solutions, acting as a trusted business partner and advisor
- Maintain strong relationships to deliver business value using relevant Business Relationship Management practices
- Assess the cybersecurity risk profile of third-party vendors and partners through due diligence reviews and questionnaires
- Monitor ongoing vendor compliance and escalate concerns appropriately
- Maintain the third-party risk inventory and associated risk ratings
- Partner with IT, Legal, Compliance, Privacy, and business units to embed risk awareness into projects and initiatives
- Provide risk-informed guidance during new technology adoption, system changes, and product launches
- Support security awareness efforts related to risk management practices
Skills
- College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required
- Intermediate level of relevant work experience required. 3-5 years of experience
- Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or a related field (or equivalent experience)
- Experience: 3–5 years of experience in cybersecurity, IT risk management, or a related discipline
- Demonstrated knowledge of cybersecurity risk frameworks and methodologies (NIST CSF, NIST RMF, ISO 27001/27005, FAIR)
- Familiarity with regulatory requirements such as SOC 2, PCI-DSS, or GDPR
- Strong analytical and problem-solving skills with the ability to translate technical risks into business language
- Excellent written and verbal communication skills, including experience preparing executive-level reports
- Proficiency with GRC tools (e.g., Venminder, Black Kite, OneTrust, or similar)
Benefits
- Full-time schedule
- Off-site remote workplace
Company Overview
Company H1B Sponsorship