[Hiring] Cybersecurity Risk Governance Principal @Cummins

Role Description

We are looking for a talented Cybersecurity Risk Governance Principal to join our team specializing in Systems/Information Technology for our Corporate organization. This is a remote role.

In this role, you will make an impact in the following ways:

• Lead the identification, assessment, and mitigation of cybersecurity risks by applying Cummins cybersecurity policies, risk management frameworks, and data privacy principles to protect critical business assets.
• Develop and execute cybersecurity strategies that proactively address emerging threats, reduce organizational risk, and strengthen the overall security posture of the business.
• Drive the application of industry frameworks and standards, including NIST, ISO, ITIL, and COBIT, ensuring cybersecurity controls and processes align with organizational objectives and compliance requirements.
• Serve as a trusted advisor to business and technology stakeholders, providing guidance on new and evolving technology solutions while balancing innovation with security and risk management.
• Influence and advocate for cybersecurity policy enhancements that improve governance, support evolving business needs, and reinforce enterprise-wide security practices.
• Lead financial planning activities, including Annual Operating Plan (AOP) development, budget management, forecasting, and resource allocation to ensure effective investment in cybersecurity initiatives.
• Build, develop, and lead high-performing teams through strategic recruiting, performance management, coaching, succession planning, and global team collaboration.
• Foster strong cross-functional relationships and a culture of accountability, ensuring adherence to Cyber, IT, and Corporate policies while delivering measurable business value through effective Business Relationship Management practices.

Qualifications

• College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required.
• 5 to 7 years of cybersecurity experience, including 3 to 5 years in cybersecurity risk management or enterprise risk management.
• Familiarity with NIST RMF, FAIR, or quantitative risk methods.
• Knowledge of threat intelligence, security operations, identity and access management, cloud security, privacy, legal risk, and regulatory requirements.
• Strong communication, analytical, organizational, and collaboration skills are required.
• CISSP, CISM, or equivalent certification is preferred.

Requirements

• Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders.
• Business insight - Applying knowledge of business and the marketplace to advance the organization’s goals.
• Demonstrates self-awareness - Using a combination of feedback and reflection to gain productive insight into personal strengths and weaknesses.
• Develops talent - Developing people to meet both their career goals and the organization’s goals.
• Global perspective - Taking a broad view when approaching issues, using a global lens.
• Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.
• Persuades - Using compelling arguments to gain the support and commitment of others.
• Plans and aligns - Planning and prioritizing work to meet commitments aligned with organizational goals.
• Resourcefulness - Securing and deploying resources effectively and efficiently.
• Strategic mindset - Seeing ahead to future possibilities and translating them into breakthrough strategies.
• Facilitation - Guides group discussions or training by creating an active environment where questions are posed, perspectives are shared, and debates occur with the goal of gaining understanding, analyzing issues, resolving conflict, exploring solutions, or making decisions.
• Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.
• Values differences - Recognizing the value that different perspectives and cultures bring to an organization.

Company Description

Cummins is an equal opportunity employer. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, sex, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity, or other status protected by law.