Cloud Security Automation Lead

PowerToFly; Columbus (OH); On-site; USD 120,000 - 190,000; Full time

Job summary

Cummins Inc. is seeking a Cloud Security Automation Lead to join our Systems/IT team in Columbus, IN. You will lead cloud security automation initiatives, embed Security by Design in deployment, and drive governance across AWS, Azure, and OCI.

This role requires 5–7 years in cybersecurity with cloud emphasis, and a relevant degree. The position is on-site with flexibility, offering strategic impact and leadership opportunities.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• 5-7 years of cybersecurity experience with emphasis on cloud security and governance.
• Certifications such as CISSP, CCSP, CISM or equivalent preferred.

Responsibilities

• Lead cloud security automation initiatives, including policy enforcement, compliance monitoring, and remediation workflows.
• Drive SecureCloud roadmaps, milestones, and key deliverables; embed Security by Design in deployment processes.
• Establish cloud security governance, standards, policies, and operational procedures; manage risk reduction.
• Oversee cloud risk identification, remediation tracking, and cross-AWS/Azure/OCI efforts.
• Drive compliance, audit readiness, and regulatory initiatives to improve maturity and control effectiveness.
• Develop executive dashboards and KPIs translating technical outcomes into business value.

Skills

Cloud security

Automation

Security by design

Policy governance

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Terraform/CloudFormation

AWS

Azure

OCI

Job description

We are looking for a talented Cloud Security Automation Lead to join our team specializing in Systems/IT for our Corporate organization in Columbus, IN.

In this role, you will make an impact in the following ways:

• Lead the development and implementation of cybersecurity solutions that align with business objectives, ensuring secure and resilient technology environments across the enterprise.
• Collaborate with cross-functional stakeholders to identify, evaluate, and integrate cybersecurity technologies that address evolving business and security requirements.
• Drive the design and optimization of secure system architectures, hardware, operating systems, and software applications to meet cybersecurity and compliance standards.
• Strengthen enterprise security posture by overseeing penetration testing activities, assessing vulnerabilities, and ensuring timely remediation of identified risks.
• Conduct research and systems engineering initiatives to introduce innovative cybersecurity capabilities that protect critical assets and support strategic growth.
• Manage budgets, forecasting, purchase orders, and financial planning activities to ensure cybersecurity investments are aligned with organizational priorities and deliver maximum value.
• Build and lead high-performing teams by mentoring employees, contractors, and less experienced team members while supporting professional development and performance excellence.
• Foster strong business relationships and partnerships across the organization to translate cybersecurity strategies into measurable business value and achieve both near-term and long-term goals.

To be successful in this role you will need the following:

Security & Compliance Principles - Applies standards, tools, and best practices to embed security, privacy, and compliance into the design/build/test/operate lifecycle for products, services, apps, systems, software, and configurations—balancing protection, efficiency, and cost.

Programming Principles - Applies programming languages, frameworks, and patterns to design, write, configure, test, and maintain software/solutions/systems that are efficient, secure, scalable, and reliable.

Data Principles - Governs, models, secures, implements, and observes data flows to ensure integrity, quality, and compliance—enabling trusted, scalable, cost-conscious data use.

Modern Development Practices - Applies modern engineering practices and tools—such as Agile/DevSecOps, CI/CD, automated testing, and infrastructure as code—to accelerate delivery, improve quality, and reduce risk across the SDLC.

Solution Design - Translate business requirements into integrated designs, architectures, patterns, and system interactions that deliver customer value and align with enterprise standards and subject-matter platforms.

System Architecture- Creates and evolves architecture system blueprints developing reusable patterns and roadmaps to ensure scalability, resilience, security, and long-term efficiency.

Demonstrating Mastery - Maintains essential knowledge and proficiency in relevant domains, tools, technologies, methodologies, or frameworks through targeted credentials and rigorous proficiency, future-proofing organizational skills against strategic needs.

Strategic and Innovative Thinking - Evaluates business and technology trends, anticipates future needs, develops creative approaches, and frames innovations to shape strategy and create durable value with cost-aware innovation.

Technical Passion & Drive - Models curiosity and excitement for technology by self-initiating continuous development, experimenting with emerging technologies, and identifying insertion opportunities that accelerate business performance.

Driving Effective Outcomes - Takes ownership, acts with urgency, and initiates action to turn goals into clear plans, decisions, guardrails, and cadences while navigating ambiguity and change to drive momentum and deliver consistent results.

Engaging with Impact - Communicates with clarity and purpose to align stakeholders, foster collaboration, build trust, and influence coordinated action across teams and functions to accelerate outcomes.

Values Differences - Recognizing the value that different perspectives and cultures bring to an organization.

Ensuring Customer Success - Embraces a customer-first mindset to deliver outcomes by linking customer needs and business priorities to aligned solutions, delivery, adoption, satisfaction, and realized value through sustained engagement that builds partnership and trust.

Education, Licenses, Certifications

College, university, or equivalent degree in Computer Science, or Information Technology, or related subject, or relevant equivalent experience required. Certified Information Systems Security Professional (CISSP) or similar certification preferred. This position may require licensing for compliance with export controls or sanctions regulations.

Experience

5-7 years of cybersecurity work experience is required. 2 years of experience with Cloud technology and concepts preferred.

• Lead cloud security automation initiatives, including policy enforcement, compliance monitoring, and remediation workflows.
• Drive execution of SecureCloud roadmaps, strategic initiatives, milestones, and key deliverables.Partner with engineering and platform teams to embed Security by Design principles and cloud security guardrails into deployment processes.
• Establish and maintain cloud security governance frameworks, standards, policies, and operational procedures.Lead cloud risk identification, prioritization, remediation tracking, and risk reduction activities across AWS, Azure, and OCI.
• Drive compliance, audit readiness, and regulatory initiatives while improving cloud security maturity and control effectiveness.
• Develop executive dashboards, KPIs, KRIs, and board-level reporting that translate technical outcomes into business value.
• Facilitate collaboration across Cybersecurity, Cloud Platform, Enterprise Architecture, GRC, Audit, and Business teams to achieve security objectives.
• Identify opportunities to standardize, simplify, and automate security processes to improve efficiency and scalability.
• Provide technical leadership, stakeholder influence, and mentorship while driving accountability and adoption of cloud security best practices.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• 5 to 7+ years of experience in cybersecurity, cloud security, cloud engineering, governance, risk, compliance, or program leadership roles.
• Strong knowledge of AWS, Azure, OCI, cloud security architectures, and cloud-native security services.
• Experience implementing security automation, Infrastructure as Code (Terraform/CloudFormation), policy-as-code, or cloud security platforms.
• Proven experience leading enterprise-scale security, cloud transformation, governance, or remediation initiatives across multiple stakeholder groups.
• Strong knowledge of security and compliance frameworks such as NIST CSF, CIS Benchmarks, and industry best practices.
• Demonstrated leadership, executive communication, stakeholder management, and ability to influence outcomes without direct authority.
• Preferred Certifications: CISSP, CCSP, CISM, CRISC, PMP, Agile/Scrum, or equivalent cloud security certifications.

Job

Systems/Information Technology

Organization

Cummins Inc.

Role Category

On-site with Flexibility

Job Type

Exempt - Experienced

ReqID

2437923

Relocation Package

No

100% On-Site

No

Cummins and E-Verify

At Cummins, we are an equal opportunity and affirmative action employer dedicated to diversity in the workplace. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law. Cummins validates the right to work using E-Verify and will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee’s Form I-9 to confirm work authorization. Visit http://EEOC.gov to know your rights on workplace discrimination.