Cybersecurity Remediation Specialist

Cummins; Troy (MI); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Relocation package

Job summary

Cummins Inc. in Troy, MI is seeking a Cybersecurity Remediation Specialist to lead remediation efforts across systems and drive risk assessments.

You will apply security policies and industry standards to protect enterprise information and provide technical guidance for new and existing technology solutions. The role requires collaboration with IT and business teams to ensure security requirements are embedded in solution design, with a focus on risk evaluation and remediation progress.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or Information Technology, or equivalent experience.
• May require licensing for export controls or sanctions.
• 3–5 years of intermediate-level experience.

Responsibilities

• Lead cybersecurity risk assessments and mitigate risks across the organization.
• Apply cybersecurity policies and industry standards to protect systems and data.
• Provide cybersecurity guidance for new and existing technology solutions.
• Evaluate security risks and recommend appropriate controls and remediation actions.
• Collaborate with business and IT teams to embed security in design and implementation.
• Interpret and apply frameworks such as NIST, ISO, ITIL, and COBIT within processes.
• Coach and mentor staff to promote cybersecurity best practices.

Skills

Cybersecurity risk management

Regulatory risk compliance

Stakeholder management

Training delivery

Education

Bachelor's in Cybersecurity/CS/IT

Job description

We are looking for a talented Cybersecurity Remediation Specialist to join our team specializing in Systems/Information Technology for Cummins, Inc. in Troy, MI.

In this role, you will make an impact in the following ways:

• Lead cybersecurity risk assessments using established risk management frameworks and develop mitigation strategies to reduce organizational risk.
• Apply cybersecurity policies, data privacy principles, and industry standards to protect enterprise systems and information.
• Provide technical cybersecurity expertise and guidance for new and existing technology solutions.
• Evaluate security risks associated with technology changes and recommend appropriate controls and remediation actions.
• Partner with business and technical stakeholders to ensure security requirements are incorporated into solution design and implementation.
• Interpret and apply cybersecurity frameworks and standards such as NIST, ISO, ITIL, and COBIT within organizational processes.
• Build and maintain strong stakeholder relationships, serving as a trusted advisor and business partner on cybersecurity matters.
• Coach, mentor, and develop less experienced team members while promoting cybersecurity best practices across the organization.

To be successful in this role you will need the following:

• Cybersecurity Risk Management - Assess cybersecurity risks, vulnerabilities, and threats. Implement mitigation strategies to reduce business risk. Provide security recommendations based on emerging threats.
• Regulatory Risk Compliance Management - Ensure compliance with regulatory requirements and industry standards. Assess the effectiveness of controls and identify opportunities to reduce risk. Recommend improvements that strengthen governance and compliance performance.
• Balances stakeholders - Build strong relationships and effectively balance the needs of multiple stakeholders. Communicate compliance requirements, risks, and priorities clearly. Collaborate across teams to achieve business and compliance objectives.
• Training Delivery - Deliver engaging training that meets individual and group learning needs. Help employees understand and apply compliance requirements in their daily work.

Education/Experience:

• College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required.
• This position may require licensing for compliance with export controls or sanctions regulations.
• Intermediate level of relevant work experience required. 3-5 years of experience

Additional Responsibilities:

Remediation Execution & Facilitation:

• Analyze cybersecurity control findings from assessments, audits, and internal reviews.
• Translate control gaps into actionable remediation activities for control owners.
• Facilitate remediation discussions with IT, engineering, and business teams.
• Drive remediation progress through collaboration and influence.

POA&M Management & Tracking:

• Develop and maintain Plans of Action and Milestones (POA&M).
• Track remediation status across multiple frameworks and business areas.
• Escalate risks related to delayed remediation activities.
• Ensure remediation plans include milestones, dependencies, and target dates.

Evidence Validation & Collaboration:

• Validate remediation actions against control intent and framework requirements.
• Coordinate collection and validation of remediation evidence.
• Support updates to SSPs, control narratives, and support documentation.
• Promote sustainable remediation practices and identify recurring trends.

Documentation, Metrics, and Reporting:

• Prepare remediation summaries and status updates for leadership.
• Support stakeholder inquiries regarding remediation status and closure rationale.
• Maintain remediation records and documentation.
• Track and report remediation progress and closure metrics.

Compensation

Please note that the salary range provided is a good faith estimate on the applicable range. The final salary offer will be determined after considering relevant factors, including a candidate’s qualifications and experience, where appropriate.

Job Systems/Information Technology

Organization Cummins Inc.

Role Category On-site with Flexibility

Job Type Exempt - Experienced

ReqID 2436996

Relocation Package Yes

100% On-Site No

Cummins and E-Verify

At Cummins, we are an equal opportunity and affirmative action employer dedicated to diversity in the workplace. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law. Cummins validates the right to work using E-Verify and will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee’s Form I-9 to confirm work authorization. Visit http://EEOC.gov to know your rights on workplace discrimination.