Enterprise Security & Vulnerability Lead

Wabtec Corporation; Erie (Erie County); Hybrid; USD 105,000 - 149,000; Full time

Benefits offered by this job

Health benefits

401(k) retirement plan

Annual bonus

Job summary

Wabtec Corporation is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across on-prem, cloud, and OT environments. You will define how cyber risk is identified, prioritized, remediated, and communicated across a global organization.

This high-visibility role offers autonomy to shape risk-based prioritization, create executive-facing insights, and drive measurable resilience improvements, including AI governance and responsible AI

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• 5+ years of cybersecurity experience required or encouraged to apply.
• Experience leading enterprise vulnerability management programs across multiple environments.
• Knowledge of vulnerability scoring, remediation workflows, and risk-based remediation approaches.
• Understanding AI/machine learning governance in a security context.
• Experience developing metrics, reports, or dashboards for cyber risk to executives.
• Familiarity with cloud security risks and shared-responsibility models.

Responsibilities

• Define and mature the enterprise vulnerability management strategy across IT, OT, cloud, and applications.
• Establish governance, standards, metrics, and reporting for enterprise cyber risk.
• Guide vulnerability identification, assessment, prioritization, remediation, and validation across global environments.
• Develop risk-based prioritization methods using threat intelligence and operational impact.
• Collaborate with infrastructure, cloud, applications, operations, and business teams to enable remediation.
• Provide reporting on risk posture, trends, and program effectiveness.
• Oversee vulnerability assessment technologies and exposure management platforms.
• Support cloud and application security initiatives across multi-cloud environments.
• Partner with M&A teams to assess acquired environments for security compliance.

Skills

Enterprise vulnerability management

Exposure management

Cyber risk management

AI governance

Metrics & dashboards

Cross-functional collaboration

Stakeholder engagement

Cloud security

Threat intelligence

Incident response collaboration

Education

Bachelor's degree in Computer Science/IT/Cybersecurity or related field

5+ years cybersecurity experience

Tools

Vulnerability assessment tools

Public cloud platforms (AWS, Azure)

Job description

Wabtec Corporation is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across on-prem, cloud, and OT environments. You will define how cyber risk is identified, prioritized, remediated, and communicated across a global organization.

This high-visibility role offers autonomy to shape risk-based prioritization, create executive-facing insights, and drive measurable resilience improvements, including AI governance and responsible AI