Business Risk Intelligence Analyst

HITEC; Columbus (IN); On-site; USD 90,000 - 120,000; Full time

Job summary

HITEC is seeking a Business Risk Intelligence Analyst in Columbus, IN to lead cybersecurity risk identification and assessment. You will translate cyber risk into business insights, publish executive risk briefs, and work with stakeholders to embed security practices across technology initiatives.

The role emphasizes collaboration with cross-functional teams, adoption of risk frameworks, and continuous improvement of intelligence methodologies to protect organizational assets.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Intelligence Studies, Risk Management, or related field.
• 3-5 years of relevant experience in cyber risk or enterprise risk management preferred.
• Knowledge of cyber threats, vulnerability management, risk frameworks and threat intelligence.

Responsibilities

• Lead cyber risk identification and assessment using established frameworks.
• Translate findings into business-focused risk intelligence for executives.
• Develop risk indicators and early warning signals for enterprise risks.
• Produce executive risk briefings and decision-ready reports.

Skills

Risk management

Cybersecurity

Stakeholder mgmt

Analytical thinking

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

MITRE ATT&CK

Job description

We are looking for a talented Business Risk Intelligence Analyst to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN.

In this role, you will make an impact in the following ways:

• Lead cybersecurity risk identification and assessment efforts by applying Cummins risk management frameworks to proactively identify, evaluate, and mitigate security threats.
• Serve as a trusted advisor to business and technology stakeholders, providing expert cybersecurity guidance for new and evolving technology solutions.
• Drive the implementation of cybersecurity policies, data privacy principles, and industry best practices to protect organizational assets and information.
• Translate cybersecurity frameworks such as NIST, ISO, ITIL, and COBIT into practical controls and processes that align with Cummins' business objectives.
• Partner with cross-functional teams to evaluate technology changes, ensuring security requirements are incorporated early in the decision-making process.
• Coach, mentor, and develop less experienced team members, strengthening the overall cybersecurity capabilities of the organization.
• Build and maintain strong stakeholder relationships, leveraging Business Relationship Management practices to deliver measurable business value.
• Influence risk-based decision-making by helping leaders understand cybersecurity risks, prioritize mitigation strategies, and balance security with business needs.

To be successful in this role you will need the following:

Action oriented - Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.

Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders.

Business insight - Applying knowledge of business and the marketplace to advance the organization's goals.

Ensures accountability - Holding self and others accountable to meet commitments.

Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.

Organizational savvy - Maneuvering comfortably through complex policy, process, and people-related organizational dynamics.

Persuades - Using compelling arguments to gain the support and commitment of others.

Resourcefulness - Securing and deploying resources effectively and efficiently.

Tech savvy - Anticipating and adopting innovations in business-building digital and technology applications.

Training Delivery - Instructs learners in a manner that engages and adjusts to individual and group needs resulting in knowledge, skills and abilities that can be applied on the job.

Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.

Regulatory Risk Compliance Management - Evaluates the design and effectiveness of controls against established industry frameworks and regulations to assess adherence with legal/regulatory requirements.

Values differences - Recognizing the value that different perspectives and cultures bring to an organization.

Education, Licenses, Certifications:

College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required. This position may require licensing for compliance with export controls or sanctions regulations.

Experience:

Intermediate level of relevant work experience required. 3-5 years of experience

Risk Intelligence Analysis

• Analyze cyber, technology, and operational risk information to identify emerging risks and potential business impacts.
• Assess internal and external intelligence to support proactive risk identification and executive decision-making.
• Translate technical findings into business-focused intelligence for leadership.

Emerging Risk Monitoring

• Monitor internal and external environments for emerging cyber, technology, regulatory, geopolitical, and operational risks.
• Identify trends, patterns, and leading indicators that could impact enterprise objectives.
• Support early warning activities through continuous intelligence collection and analysis.

Risk Correlation

• Correlate information from cybersecurity operations, vulnerability management, threat intelligence, audit, compliance, enterprise risk, and business functions.
• Identify relationships between risk events, business impacts, and strategic priorities.
• Support development of enterprise Key Risk Indicators (KRIs) and Early Warning Indicators (EWIs).

Intelligence Reporting

• Develop executive risk briefings, intelligence reports, trend analyses, and emerging risk assessments.
• Produce decision-ready intelligence tailored for executive leadership, governance committees, and business stakeholders.
• Contribute to quarterly and annual Business Risk Intelligence reporting.

Risk Assessment & Decision Support

• Support enterprise risk assessments by evaluating likelihood, business impact, and potential mitigation strategies.
• Assist leadership in prioritizing risks based on business context and organizational objectives.
• Contribute to scenario analysis and strategic risk planning activities.

Collaboration & Continuous Improvement

• Partner with Cybersecurity, Enterprise Risk Management, Audit, Compliance, Privacy, Legal, IT, and business teams to gather and validate intelligence.
• Continuously improve intelligence methodologies, reporting standards, and analytical processes.
• Leverage AI-enabled tools and analytics to improve the efficiency, quality, and timeliness of intelligence products while ensuring appropriate human oversight.

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Intelligence Studies, Risk Management, or related field. Experience in cybersecurity, threat intelligence, risk analysis, or enterprise risk management. Knowledge of cyber threats, vulnerability management, risk frameworks, MITRE ATT&CK, threat intelligence, and business risk concepts preferred.

100% On-Site No

As Cummins continues to grow, you'll be provided with continuous learning opportunities, supportive benefits and a culture that values your wellbeing, safety and work-life balance. Here, you'll have the power to determine your future with innovative technology, a focus on sustainability and with a company positioned for long-term growth.