Cloud Security Capability Lead

PowerToFly; Columbus (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Cummins Inc. is seeking a Cloud Security Capability Lead to drive the enterprise cloud security strategy and governance across AWS, Azure, and OCI.

You will work with architecture, engineering, and business teams to align security priorities with strategic objectives and deliver actionable risk metrics. The role emphasizes security-by-design, program leadership, and cross-functional collaboration to improve compliance, asset visibility, and secure cloud practices.

Qualifications

• Demonstrated ability to lead enterprise cybersecurity or cloud transformation programs with measurable business outcomes.
• Strong expertise in cloud security principles, risk management, and compliance across modern cloud environments.
• Excellent stakeholder management and ability to align security with business objectives.

Responsibilities

• Lead execution and evolution of Cummins' enterprise cloud security strategy across AWS, Azure, and OCI.
• Establish scalable governance frameworks and security standards.
• Drive enterprise-wide risk reduction through remediation planning and validation.
• Partner with architecture, engineering, cybersecurity, and business teams to align priorities.
• Improve asset visibility and tagging programs for security governance.
• Deliver board-ready security metrics and risk reporting.
• Promote security awareness and secure cloud engineering practices.
• Manage cloud security roadmaps and transformation initiatives.

Skills

Cloud security

Governance

Risk management

Stakeholder management

Security-by-design

Education

Bachelor's degree in CS/IT

CISSP or similar certification

Tools

Jira

Confluence

ServiceNow

CMDB

GRC platforms

Job description

We are looking for a talented Cloud Security Capability Lead to join our Cummins Inc. team in Columbus, Indiana .

In this role, you will make an impact in the following ways:

• Lead the execution and continuous evolution of Cummins' enterprise cloud security strategy across AWS, Azure, and OCI.
• Strengthen cybersecurity posture by establishing scalable governance frameworks, security standards, and operating models.
• Drive enterprise-wide risk reduction initiatives through proactive remediation planning, execution, and validation.
• Partner with architecture, engineering, cybersecurity, and business teams to align cloud security priorities with business objectives.
• Improve compliance, accountability, and asset visibility through effective cloud resource ownership and tagging programs.
• Deliver actionable security insights through executive and board-level metrics, reporting, and risk communication.
• Foster a culture of security awareness by developing targeted training programs and promoting secure cloud engineering practices.
• Enable strategic decision-making by managing cloud security roadmaps, organizational priorities, and transformation initiatives.

To be successful in this role, you will need the following:

• Demonstrated ability to lead enterprise cybersecurity, cloud governance, or transformation programs while driving measurable business outcomes.
• Strong expertise in cloud security principles, risk management, compliance frameworks, and security-by-design practices across modern cloud environments.
• Exceptional stakeholder management, communication, and influencing skills with the ability to build alignment across technical and business functions.
• Proven capability to manage complex priorities, roadmaps, dependencies, and organizational change in a fast-paced environment.
• Strong foundation in modern technology practices, including cloud platforms, secure development principles, system architecture, and operational excellence.

Education, Licenses, Certifications:

• College, university, or equivalent degree in Computer Science, Information Technology, or related subject, or relevant equivalent experience preferred.
• Certified Information Systems Security Professional (CISSP) or similar certification preferred.
• This position may require licensing for compliance with export controls or sanctions regulations.

Additional Responsibilities & Preferred Key Competencies:

• Lead the operationalization of the SecureCloud program by defining and maintaining cloud security policies, standards, governance frameworks, and security controls across AWS, Azure, and OCI.
• Drive collaboration across Cybersecurity, Cloud Platform Engineering, Enterprise Architecture, Architecture Review Board, Risk, Compliance, Infrastructure, and Application teams to ensure consistent cloud security execution.
• Establish governance processes that improve cloud asset ownership, accountability, resource tagging compliance, and overall security visibility.
• Manage enterprise cloud security initiatives from strategy through execution, including roadmap development, milestone tracking, dependency management, and remediation oversight.
• Partner with Governance, Risk, and Compliance teams to maintain risk registers, improve compliance performance, and support executive risk management activities.
• Develop board-ready reporting, KPIs, and KRIs that clearly demonstrate security posture improvements, compliance progress, risk reduction, and business value.
• Promote a security-first culture through cloud security awareness programs, role-based training, and advocacy of secure engineering and CloudSecOps practices.
• Leverage tools such as Jira, Confluence, ServiceNow, CMDB, GRC platforms, and workflow automation solutions to improve governance, operational efficiency, and program transparency.
• Apply knowledge of cloud assessments, compliance monitoring, security metrics, risk remediation, asset management, and enterprise control frameworks to drive sustainable security outcomes.
• Preferred certifications include CISSP, CCSP, CISM, or comparable industry credentials.
• Demonstrate strong leadership, adaptability, strategic thinking, customer focus, and the ability to influence stakeholders at all levels of the organization.

Please note that the salary range provided is a good faith estimate on the applicable range. The final salary offer will be determined after considering relevant factors, including a candidate’s qualifications and experience, where appropriate.

Job Systems/Information Technology

Organization Cummins Inc.

Role Category On-site with Flexibility

Job Type Exempt - Experienced

ReqID 2437311

Relocation Package Yes

100% On-Site No

Cummins and E-Verify

At Cummins, we are an equal opportunity and affirmative action employer dedicated to diversity in the workplace. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law. Cummins validates the right to work using E-Verify and will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee’s Form I-9 to confirm work authorization. Visit http://EEOC.gov to know your rights on workplace discrimination.