Cybersecurity Risk Governance Principal

This is a fully remote position, open to applicants in Alabama, +45 more states.

📋 Description

• Oversee the identification, evaluation, and mitigation of cybersecurity risks by utilizing Cummins policies, risk management frameworks, and data privacy principles.

• Formulate and implement cybersecurity strategies that tackle emerging threats while enhancing the organization's security posture.

• Utilize NIST, ISO, ITIL, and COBIT frameworks and standards in practice.

• Provide guidance to business and technology stakeholders regarding technology solutions, security measures, and risk management.

• Shape enhancements to cybersecurity policies and enterprise security practices.

• Direct the development of the annual operating plan, manage budgets, forecast needs, and allocate cybersecurity resources.

• Cultivate and lead high-performing teams through recruitment, performance management, coaching, succession planning, and global collaboration.

• Manage enterprise cyber risk governance, which includes risk identification, assessment, categorization, reporting, acceptance, and exception management.

• Collaborate with cybersecurity, legal, privacy, compliance, business, and technology stakeholders to overcome obstacles.

• Integrate threat intelligence and emerging threat trends into priority treatment strategies.

• Ensure that treatment plans have designated owners, funding sources, and timelines.

• Report on the organization's cybersecurity risk posture and treatment progress to senior leadership, supporting ERM and governance committees.

• Convert technical cyber risks into their financial, operational, regulatory, and reputational business implications.

⛳️ Requirements

• A bachelor's degree in cybersecurity, information technology, or a related discipline, or equivalent degree/relevant experience.

• 5–7 years of experience in cybersecurity.

• 3–5 years of experience in cybersecurity risk management or enterprise risk management.

• Familiarity with NIST RMF, FAIR, or quantitative risk assessment methodologies.

• Understanding of threat intelligence, security operations, identity and access management, cloud security, privacy, legal risk, and regulatory requirements.

• Excellent communication, analytical, organizational, and collaborative skills.

• A significant amount of relevant work experience.

• CISSP, CISM, or a comparable certification is preferred.

• Licensing may be required to comply with export controls or sanctions regulations.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and career advancement.

• Flexible work arrangements to support work-life balance.

• Competitive salary and performance-based incentives.

• Supportive and inclusive work environment.