Cybersecurity Director
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cybersecurity Director leading Cummins’ global application, cloud, vulnerability, and penetration-testing security strategy. Translating technical findings into enterprise risk decisions and enabling secure Frontier AI adoption.
Responsibilities:
- Own the global strategy, leadership, and maturity of Application Security, Vulnerability Management, Cloud Security, and Penetration Testing
- Identify and evaluate cybersecurity exposures across applications, infrastructure, cloud environments, products, and technology platforms
- Partner with risk owners to mitigate cybersecurity risks
- Translate technical security findings into business risk and influence enterprise risk prioritization
- Strengthen compliance and control frameworks and provide measurable evidence of risk reduction
- Champion Application Security oversight and security-by-design practices across product development, SDLC, DevSecOps, and application processes
- Lead enterprise vulnerability identification, prioritization, remediation, and validation
- Establish risk-based prioritization using exploitability, threat intelligence, and exposure
- Lead global Cloud Security strategy and requirements and manage risks across cloud infrastructure, workloads, identities, configurations, applications, and data
- Develop the penetration testing service offering with Internal Audit and stakeholders
- Validate vulnerabilities and controls through penetration testing and red team exercises
- Identify exploitable attack paths and systemic weaknesses with purple team partners
- Partner with Cyber GRC on risk methodologies, metrics, assessments, policies, controls, compliance, risk acceptance, and material risk escalation
- Support secure adoption of Frontier AI and emerging technologies
- Identify opportunities to use AI for vulnerability prioritization, security testing, risk analysis, automation, and cyber defense
- Lead globally through influence, partnership, and accountability across Cyber Security, GRC, Product, Engineering, Cloud, Infrastructure, IT, and business organizations
- Balance security requirements with business priorities, operational needs, cost, and innovation
- Drive reduced material cybersecurity risk, faster remediation, secure-by-design adoption, effective security validation, executive cyber-risk visibility, and increased automation
Requirements:
- College, university, or equivalent degree in Computer Science, Information Technology, Engineering, or related subject, or relevant equivalent experience required
- GIAC Security Essentials Certification, GIAC Security Leadership Certification, ISACA Certified Information Security Manager, Microsoft Certified Systems Engineer: Security, or CISSP certification preferred
- Understanding of industrial cybersecurity controls and solutions, including asset management, vulnerability management, anomaly detection, identity and access management, network security, endpoint security, application security, IDS/IPS, deep packet inspection, SIEM, data analytics, security and/or risk management, and product development
- Position may require licensing for compliance with export controls or sanctions regulations
- Must be based in one of the allowable U.S. states or Washington, D.C.
Benefits:
- Off-site remote work
- Equal employment opportunities
- No relocation required/relocation not eligible
Similar Jobs
Information Security, Compliance & Internal Controls Manager – ISO 27001
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS-2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s AI-driven application and cloud security for media measurement platforms. Building automated DevSecOps guardrails, vulnerability remediation, and secure AWS development workflows.
Staff Software Engineer, Security Factory – Static Analysis
Staff software engineer directing GitLab's AI-assisted static analysis engine and SAST capabilities. Defining program-analysis architecture, trustworthy agent tooling, and security detection quality.
Azure Cloud & Security Engineer
Azure Cloud & Security Engineer building secure, scalable Azure infrastructure for CI&T’s enterprise AI transformation solutions. Managing Bicep IaC, Azure DevOps pipelines, Container Apps, KEDA autoscaling, and cloud security.
Senior IT Systems Specialist – IAM & Security – F5 BIG-IP, Keycloak, Nevis
Senior IAM & Security specialist operating F5 BIG-IP, Keycloak and Nevis solutions for a Swiss recruiting agency client. Securing authentication and access to business-critical applications, APIs and portals.
Information Security Compliance Intern
Information Security Compliance Intern supporting audit partner operations at Sprinto, an autonomous trust platform. Building AI-assisted workflows for compliance and evidence mapping.
Cybersecurity Intern – Application Security
Cybersecurity intern supporting application security projects at GuidePoint Security, a cybersecurity solutions provider. Building skills through technical development, security response, training, and expert mentorship.
Senior Security and Compliance Specialist
Senior Security and Compliance Specialist securing Veterans Affairs technology programs. Applying NIST, FISMA, and compliance expertise to support federal digital services and ATO activities.
Information Security Architect – AI
AI Security Architect designing secure frameworks for Cotiviti’s AI systems. Leading threat modeling, testing, compliance, and data protection across the AI lifecycle.
Senior Security Engineer
Senior Security Engineer securing ICT processes and assets at XTB, a global online financial trading company. Managing incidents, vulnerabilities, security tools, threat modeling, and cybersecurity training.
Senior Security Engineer – Red Team
Red-team security engineer conducting penetration tests and threat research for Insider One’s AI-powered marketing and customer engagement platform. Supporting secure development across agile teams.
Group IT Security Manager
Group IT Security Manager securing Bolton’s global FMCG technology infrastructure. Leading Zero Trust, SOC effectiveness, incident response and security architecture initiatives from Milan.
Enterprise AI Security Engineer
Enterprise AI Security Engineer building guardrails, detections, and telemetry for Lilly’s enterprise AI systems. Integrating AI security controls across cloud, identity, endpoint, and operations platforms.
Enterprise AI Security Advisor
Enterprise AI Security Advisor securing agents, models, and AI infrastructure for Lilly’s global pharmaceutical business. Setting enterprise controls, testing standards, and security strategy.
Senior Security Advisor – Lead Control Assessor
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Senior Zscaler Security Engineer
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.
Senior Staff AI Security Lead
Senior Staff AI Security Lead building secure LLM infrastructure and driving AI adoption across IonQ’s quantum computing security organization. Delivering production AI systems, governance, and measurable analyst productivity gains.
Senior Product Security Engineer
Product Security Engineer securing Close’s AI-powered CRM across applications, APIs, cloud infrastructure, and integrations. Building vulnerability management, security automation, and incident-response capabilities.
Principal Linux Security Engineer
Principal Linux Security Engineer securing CIQ’s enterprise Linux distributions and infrastructure. Building compliance profiles, security tooling, errata, and CVE assessments for demanding workloads.
Information Security and Governance Analyst, Mid-Level
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.