Cybersecurity Remediation Specialist

Description

We are looking for a talented Cybersecurity Remediation Specialist to join our team specializing in Systems/Information Technology for Cummins, Inc. in Troy, MI.

In this role, you will make an impact in the following ways:

• 
  

  Lead cybersecurity risk assessments using established risk management frameworks and develop mitigation strategies to reduce organizational risk.

  
  


• 
  

  Apply cybersecurity policies, data privacy principles, and industry standards to protect enterprise systems and information.

  
  


• 
  

  Provide technical cybersecurity expertise and guidance for new and existing technology solutions.

  
  


• 
  

  Evaluate security risks associated with technology changes and recommend appropriate controls and remediation actions.

  
  


• 
  

  Partner with business and technical stakeholders to ensure security requirements are incorporated into solution design and implementation.

  
  


• 
  

  Interpret and apply cybersecurity frameworks and standards such as NIST, ISO, ITIL, and COBIT within organizational processes.

  
  


• 
  

  Build and maintain strong stakeholder relationships, serving as a trusted advisor and business partner on cybersecurity matters.

  
  


• 
  

  Coach, mentor, and develop less experienced team members while promoting cybersecurity best practices across the organization.

  
  

To be successful in this role you will need the following:

• Cybersecurity Risk Management - Assess cybersecurity risks, vulnerabilities, and threats. Implement mitigation strategies to reduce business risk. Provide security recommendations based on emerging threats.




• Regulatory Risk Compliance Management - Ensure compliance with regulatory requirements and industry standards. Assess the effectiveness of controls and identify opportunities to reduce risk. Recommend improvements that strengthen governance and compliance performance.




• Balances stakeholders - Build strong relationships and effectively balance the needs of multiple stakeholders. Communicate compliance requirements, risks, and priorities clearly. Collaborate across teams to achieve business and compliance objectives.




• Training Delivery - Deliver engaging training that meets individual and group learning needs. Help employees understand and apply compliance requirements in their daily work.

Education/Experience:

• College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required.




• This position may require licensing for compliance with export controls or sanctions regulations.




• Intermediate level of relevant work experience required. 3-5 years of experience

Additional Responsibilities:

Remediation Execution & Facilitation:

• Analyze cybersecurity control findings from assessments, audits, and internal reviews.




• Translate control gaps into actionable remediation activities for control owners.




• Facilitate remediation discussions with IT, engineering, and business teams.




• Drive remediation progress through collaboration and influence.

POA&M Management & Tracking:

• Develop and maintain Plans of Action and Milestones (POA&Ms).




• Track remediation status across multiple frameworks and business areas.




• Escalate risks related to delayed remediation activities.




• Ensure remediation plans include milestones, dependencies, and target dates.

Evidence Validation & Collaboration:

• Validate remediation actions against control intent and framework requirements.




• Coordinate collection and validation of remediation evidence.




• Support updates to SSPs, control narratives, and support documentation.




• Promote sustainable remediation practices and identify recurring trends.

Documentation, Metrics, and Reporting:

• Prepare remediation summaries and status updates for leadership.




• Support stakeholder inquiries regarding remediation status and closure rationale.




• Maintain remediation records and documentation.




• Track and report remediation progress and closure metrics.

Compensation

Please note that the salary range provided is a good faith estimate on the applicable range. The final salary offer will be determined after considering relevant factors, including a candidate’s qualifications and experience, where appropriate.