Cybersecurity Compliance Lead: HIPAA & PCI Controls

PowerToFly; Columbus (OH); On-site; USD 85,000 - 110,000; Full time

Job summary

Cummins Inc. is seeking a Cybersecurity Compliance Analyst to join our Systems/Information Technology team in Columbus, IN. You will lead risk assessments, guide mitigation strategies, and advise on secure technology choices across a range of regulatory requirements.

Responsibilities include coordinating HIPAA/PCI related activities, applying industry standards, and mentoring junior staff to strengthen our security posture and compliance across critical systems.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent experience.

Responsibilities

• Lead cybersecurity risk identification and assessment efforts using governance frameworks.
• Provide guidance on risk severity, mitigation strategies, and control implementation.
• Serve as trusted advisor to stakeholders on secure technology decisions.
• Apply security policies and data privacy principles to protect systems and data.
• Leverage frameworks like NIST/ISO/COBIT to align controls with processes.
• Deliver technical cybersecurity expertise for secure design, deployment and operations.
• Foster cross-functional collaboration and drive measurable business value.
• Coach and mentor team members to promote cybersecurity excellence.

Skills

Cybersecurity risk management

Regulatory compliance

Stakeholder management

Cross-functional collaboration

Security governance

Education

Bachelor's degree in Cybersecurity/CS/IT

Job description

Cummins Inc. is seeking a Cybersecurity Compliance Analyst to join our Systems/Information Technology team in Columbus, IN. You will lead risk assessments, guide mitigation strategies, and advise on secure technology choices across a range of regulatory requirements.

Responsibilities include coordinating HIPAA/PCI related activities, applying industry standards, and mentoring junior staff to strengthen our security posture and compliance across critical systems.