Cybersecurity Remediation Specialist

Hobbsnews; Columbus, Northern (IN, KY); Hybrid; USD 80,000 - 110,000; Full time

Job summary

Cummins is seeking a Cybersecurity Remediation Specialist to join our corporate team in Columbus, IN. You will lead remediation efforts, translate control gaps into actionable tasks, and collaborate with IT, engineering, and business teams to strengthen security posture.

The role emphasizes governance via frameworks such as NIST, ISO, ITIL, and COBIT, with a focus on evidence validation, documentation, and continuous improvement of controls.

Qualifications

• College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required.
• 3–5 years of relevant work experience in cybersecurity remediation and risk management.
• Experience translating control gaps into remediation activities and coordinating with IT/engineering teams.

Responsibilities

• Analyze cybersecurity control findings from assessments, audits, and internal reviews.
• Translate control gaps into actionable remediation activities for control owners.
• Facilitate remediation discussions with IT, engineering, and business teams.
• Develop and maintain Plans of Action and Milestones (POA&Ms).
• Track remediation status across multiple frameworks and business areas.
• Validate remediation actions against control intent and framework requirements.
• Prepare remediation summaries and status updates for leadership.

Skills

Cybersecurity

Risk management

Stakeholder engagement

Communication

Mentoring

Education

Cybersecurity or IT degree

Job description

We are looking for a talented Cybersecurity Remediation Specialist to join our team specializing in Systems/Information Technology f or our Corporate organization in Columbus, IN.

In this role, you will make an impact in the following ways:

• LeadcybersecurityriskidentificationandassessmenteffortsbyapplyingCumminsriskmanagementframeworkstoproactivelyprotectbusinesssystems,data,andoperations.
• Provideexpertguidanceoncybersecurityrisks,helpingteamsevaluatethreatseverity,developmitigationstrategies,andstrengthenoverallsecurityposture.
• Serveasatrustedadvisortobusinessandtechnologystakeholders,ensuringcybersecurityrequirementsareincorporatedintonewandevolvingtechnologysolutions.
• Applyindustry-recognizedframeworksandstandardssuchasNIST,ISO,ITIL,andCOBITtosupportcompliance,governance,andeffectivecybersecuritycontrolsacrosstheorganization.
• ChampionadherencetoCumminscybersecuritypoliciesanddataprivacyprinciples,helpingsafeguardsensitiveinformationandmaintainregulatorycompliance.
• Collaborateacrosscross-functionalteamstobalancesecurity,businessobjectives,andoperationalneedswhiledeliveringsecureandscalabletechnologysolutions.
• Mentor,coach,anddeveloplessexperiencedteammembers,fosteringcybersecurityknowledge,technicalgrowth,andacultureofcontinuouslearning.
• Buildandmaintainstrongbusinessrelationships,leveragingBusinessRelationshipManagementpracticestodrivebusinessvalue,influencedecision-making,andenhancestakeholderconfidenceincybersecurityinitiatives.

To be successful in this role you will need the following:

Action oriented - Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.

Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders.

Business insight - Applying knowledge of business and the marketplace to advance the organization’s goals.

Ensures accountability - Holding self and others accountable to meet commitments.

Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.

Organizational savvy - Maneuvering comfortably through complex policy, process, and people-related organizational dynamics.

Persuades - Using compelling arguments to gain the support and commitment of others.

Resourcefulness - Securing and deploying resources effectively and efficiently.

Tech savvy - Anticipating and adopting innovations in business-building digital and technology applications.

Training Delivery - Instructs learners in a manner that engages and adjusts to individual and group needs resulting in knowledge, skills and abilities that can be applied on the job.

Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.

Regulatory Risk Compliance Management - Evaluates the design and effectiveness of controls against established industry frameworks and regulations to assess adherence with legal/regulatory requirements.

Values differences - Recognizing the value that different perspectives and cultures bring to an organization.

Education, Licenses, Certifications:

College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required. This position may require licensing for compliance with export controls or sanctions regulations.

Experience:

Intermediate level of relevant work experience required. 3-5 years of experience

1. Remediation Execution & Facilitation:

Analyze cybersecurity control findings from assessments, audits, and internal reviews.

Translate control gaps into actionable remediation activities for control owners.

Facilitate remediation discussions with IT, engineering, and business teams.

Drive remediation progress through collaboration and influence.

2. POA&M Management & Tracking:

Develop and maintain Plans of Action and Milestones (POA&Ms).

Track remediation status across multiple frameworks and business areas.

Escalate risks related to delayed remediation activities.

Ensure remediation plans include milestones, dependencies, and target dates.

3. Evidence Validation & Collaboration:

Validate remediation actions against control intent and framework requirements.

Coordinate collection and validation of remediation evidence.

Support updates to SSPs, control narratives, and support documentation.

Promote sustainable remediation practices and identify recurring trends.

4. Documentation, Metrics, and Reporting:

Prepare remediation summaries and status updates for leadership.

Support stakeholder inquiries regarding remediation status and closure rationale.

Maintain remediation records and documentation.

Track and report remediation progress and closure metrics.

100% On-Site No

As Cummins continues to grow, you'll be provided with continuous learning opportunities, supportive benefits and a culture that values your wellbeing, safety and work-life balance. Here, you'll have the power to determine your future with innovative technology, a focus on sustainability and with a company positioned for long-term growth.