Cybersecurity Compliance Analyst

Cummins Inc.; Columbus (IN); On-site; USD 85,000 - 125,000; Full time

Job summary

Cummins Inc. in Columbus, IN seeks a Cybersecurity Compliance Analyst to join our Systems/IT team in the Corporate organization. You will lead risk identification, assess threats, and implement controls to protect key systems.

You will translate NIST/ISO/COBIT into practical requirements, collaborate with business and IT teams, and coach colleagues on cybersecurity best practices while supporting HIPAA and PCI compliance activities.

Qualifications

• Degree in Cybersecurity, Computer Science, Information Technology or related field.
• Licensing for export controls or sanctions regulations may be required.
• 3–5 years of relevant work experience; customer cybersecurity survey responses experience is noted.

Responsibilities

• Lead cybersecurity risk identification and assessment efforts using Cummins risk management frameworks.
• Provide guidance on risk severity, mitigation strategies, and control implementation.
• Serve as trusted advisor to business and technology stakeholders to influence secure technology decisions.
• Apply Cummins cybersecurity policies and data privacy principles to protect critical systems and operations.
• Leverage frameworks such as NIST, ISO, COBIT to align security controls with processes and compliance requirements.
• Deliver technical cybersecurity expertise for new and existing technology solutions with secure design and deployment.
• Build and maintain cross-functional relationships to drive collaboration and value through Business Relationship Management.
• Coach and develop less experienced team members and foster cybersecurity excellence.

Skills

Action oriented

Stakeholder management

Business insight

Accountability

Complexity management

Organizational savvy

Persuasion

Tech savvy

Cybersecurity risk mgmt

Regulatory compliance

Education

Cybersecurity or CS degree

Tools

NIST

ISO

COBIT

Job description

We are looking for a talented Cybersecurity Compliance Analyst to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN.

In this role, you will make an impact in the following ways:

• Lead cybersecurity risk identification and assessment efforts, ensuring potential threats are evaluated using Cummins risk management frameworks and prioritized appropriately.
• Provide expert guidance on risk severity, mitigation strategies, and control implementation to strengthen the organization's security posture.
• Serve as a trusted advisor to business and technology stakeholders by influencing secure technology decisions and promoting cybersecurity best practices.
• Apply Cummins cybersecurity policies and data privacy principles to protect critical systems, information, and business operations.
• Leverage industry frameworks such as NIST, ISO, ITIL, and COBIT to align security controls with organizational processes and compliance requirements.
• Deliver technical cybersecurity expertise for new and existing technology solutions, helping ensure secure design, deployment, and ongoing operations.
• Build and maintain strong cross-functional relationships that drive collaboration, trust, and measurable business value through effective Business Relationship Management practices.
• Coach, mentor, and develop less experienced team members, fostering a culture of continuous learning, accountability, and cybersecurity excellence.

To be successful in this role you will need the following:

• Action oriented - Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.
• Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders.
• Business insight - Applying knowledge of business and the marketplace to advance the organization’s goals.
• Ensures accountability - Holding self and others accountable to meet commitments.
• Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.
• Organizational savvy - Maneuvering comfortably through complex policy, process, and people-related organizational dynamics.
• Persuades - Using compelling arguments to gain the support and commitment of others.
• Resourcefulness - Securing and deploying resources effectively and efficiently.
• Tech savvy - Anticipating and adopting innovations in business-building digital and technology applications.
• Training Delivery - Instructs learners in a manner that engages and adjusts to individual and group needs resulting in knowledge, skills and abilities that can be applied on the job.
• Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.
• Regulatory Risk Compliance Management - Evaluates the design and effectiveness of controls against established industry frameworks and regulations to assess adherence with legal/regulatory requirements.
• Values differences - Recognizing the value that different perspectives and cultures bring to an organization.

Education, Licenses, Certifications

• College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required.
• This position may require licensing for compliance with export controls or sanctions regulations.

Experience

• Intermediate level of relevant work experience required.
• 3-5 years of experience
• Customer Cybersecurity Survey Responses:

Review and respond to customer cybersecurity surveys, questionnaires, and related information requests within required deadlines.
Translate technical information, control evidence, and program documentation into clear, accurate, customer-appropriate responses.
Maintain a catalog of standard responses and supporting evidence to improve consistency, efficiency, and reuse.

HIPAA Compliance Support:

Support HIPAA cybersecurity compliance activities related to electronic protected health information (ePHI), documentation, evidence collection, and control alignment.
Gather and organize information related to administrative, physical, and technical safeguards.
Partner with privacy, legal, IT, security, and business stakeholders on HIPAA-related inquiries, assessments, and evidence readiness.

PCI Compliance Support:

Support PCI DSS compliance activities, including evidence collection, assessment preparation, control documentation, and response coordination.
Coordinate with business, IT, application, infrastructure, and security stakeholders to obtain accurate PCI information and evidence.
Maintain PCI response materials, control narratives, and reusable documentation for audits, assessments, and stakeholder requests.

Data Collection, Stakeholder Coordination & Evidence Management:

Identify information owners and coordinate across teams to collect required documentation, evidence, and approvals.
Validate that information is responsive to the request, aligned to control intent, and appropriate for the intended audience.
Maintain organized records of evidence, decisions, response rationale, and supporting documentation, and GRC updates.

Compliance Monitoring, Metrics & Reporting:

Track and report status for PCI, HIPAA, and customer request activities, including open items, due dates, blockers, and completion status.
Prepare compliance summaries, status updates, and leadership-ready reporting as needed.
Identify recurring trends, process gaps, and improvement opportunities across compliance response workflows and knowledge management practices.

Job Systems/Information Technology

Organization Cummins Inc.

Role Category On-site with Flexibility

Job Type Exempt - Experienced

ReqID 2429210

Relocation Package No

100% On-Site No

Cummins and E-Verify

At Cummins, we are an equal opportunity and affirmative action employer dedicated to diversity in the workplace. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law. Cummins validates the right to work using E-Verify and will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee’s Form I-9 to confirm work authorization. Visit http://EEOC.gov to know your rights on workplace discrimination.