We are looking for a talented Cybersecurity Advisor Principal to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN.
In this role, you will make an impact in the following ways:
- Strengthen the organization's cybersecurity posture by identifying vulnerabilities, assessing risks, and implementing effective security controls that protect critical systems and data.
- Ensure compliance with security frameworks and regulatory requirements by applying established standards, governance practices, and cybersecurity policies across technology solutions.
- Proactively identify and mitigate security threats by analyzing vulnerability and configuration data and recommending remediation strategies before risks impact the business.
- Influence secure technology design and implementation by partnering with cross-functional teams to integrate security requirements throughout the solution development lifecycle.
- Enhance enterprise resilience by reviewing systems and architectures, identifying security weaknesses, and recommending improvements that support business objectives while reducing operational risk.
- Provide trusted cybersecurity guidance to leaders and stakeholders by translating emerging threats and vulnerabilities into actionable recommendations that enable informed decision-making.
- Promote secure engineering best practices by applying principles of secure architecture, secure design, and secure coding to ensure confidentiality, integrity, availability, authentication, and non-repudiation of systems and data.
- Develop team capability and business partnerships by mentoring less experienced team members, building strong stakeholder relationships, and driving collaborative solutions that deliver measurable business value.
To be successful in this role you will need the following:
- Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders.
- Builds effective teams - Building strong-identity teams that apply their diverse skills and perspectives to achieve common goals.
- Business insight - Applying knowledge of business and the marketplace to advance the organization’s goals.
- Collaborates - Building partnerships and working collaboratively with others to meet shared objectives.
- Drives engagement - Creating a climate where people are motivated to do their best to help the organization achieve its objectives.
- Instills trust - Gaining the confidence and trust of others through honesty, integrity, and authenticity.
- Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.
- Business Analysis Planning - Identifies the activities needed to conduct business analysis considering the five business aspects, level of detail, and approach for eliciting requirements to plan for resources and techniques to document the business needs and solution characteristics.
- Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.
- Strategic Planning and Policy - Advocates for changes in policy through collaboration and the identification of gaps identified by the use of cybersecurity technologies that protect Cummins' data and business information systems.
- Systems Analysis - Designs information systems solutions using solution design documents and the security review tool to help the organization operate more securely, efficiently and effectively.
- Systems Security Requirements Planning - Consults with customers through attending cross-functional meetings to gather and evaluate security requirements and translates these security requirements for incorporation into a technical solution(s); provides guidance to partners on how to best apply security requirements as part of the Cummins governance processes through consultation to reduce business risk.
- Values differences - Recognizing the value that different perspectives and cultures bring to an organization.
Education, Licenses, Certifications:
- College, university, or equivalent degree in Computer Science, or Information Technology, or related subject, or relevant equivalent experience required.
- Certified Information Systems Security Professional (CISSP) or similar certification preferred.
- This position may require licensing for compliance with export controls or sanctions regulations.
Experience:
- 5-7 years of cybersecurity work experience is required.
- 2 years of experience with Cloud technology and concepts preferred.
Design, lead, and implement a strategy for the IT organization to populate Disaster Recovery plans for every application used at our plants. This role will strengthen the organization’s security posture through a proactive, risk-based, focused on a common resilience and recovery framework. The position is responsible for coordinating with application owners to define, test and audit DR plans.
Key Competencies and Skills
• Coordinate and participate in testing.
• Establish and maintain control points for resilience and recovery KPIs.
• Design and update disaster reovery and PACE plans.
• Conduct risk assessments and ensure compliance.
• Prepare reports and continuously improve application strategies.