Enterprise Vulnerability Management Lead (Hybrid)

Wabtec; Erie (Erie County); Hybrid; USD 105,000 - 149,000; Full time

Job summary

Wabtec’s Enterprise Information Security team seeks an experienced manager to lead the enterprise vulnerability management program across on-prem, cloud, applications, OT, and M&A environments. You’ll shape how cyber risk is identified, prioritized, remediated, and communicated globally, driving measurable resilience and risk reduction through AI governance and advanced metrics.

You will work with infrastructure, cloud, and business teams to ensure timely remediation and governance, including

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or related field, or equivalent experience.
• 5+ years of relevant cybersecurity experience encouraged to apply.
• Experience leading or contributing to enterprise vulnerability or risk management programs across multiple environments.
• Knowledge of vulnerability assessment technologies, remediation workflows, risk prioritization, and exposure management.
• Understanding of vulnerability scoring, threat intelligence, exploitability, business criticality, and risk-based remediation.
• Experience developing metrics or dashboards that communicate cyber risk to technical and executive audiences.
• Experience extending vulnerability management into acquired environments and integrating with security teams.
• Experience with AWS or Azure and cloud security risks and shared-responsibility models.

Responsibilities

• Define and mature the enterprise vulnerability management strategy across IT, OT, cloud, apps, and other environments.
• Establish governance, standards, procedures, and reporting for consistent cyber risk view.
• Guide identification, assessment, prioritization, remediation, validation, and exception management across global environments.
• Develop risk-based prioritization using threat intel, exploitability, criticality, and controls.
• Partner with cross-functional teams to enable timely, sustainable remediation.
• Provide concise reporting on risk posture, trends, and program effectiveness.
• Oversee vulnerability assessment tools, exposure management platforms, and continuous monitoring.

Skills

Vulnerability mgmt

AI governance

Metrics reporting

Stakeholder engagement

Incident readiness

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

AWS

Azure

Job description

Wabtec’s Enterprise Information Security team seeks an experienced manager to lead the enterprise vulnerability management program across on-prem, cloud, applications, OT, and M&A environments. You’ll shape how cyber risk is identified, prioritized, remediated, and communicated globally, driving measurable resilience and risk reduction through AI governance and advanced metrics.

You will work with infrastructure, cloud, and business teams to ensure timely remediation and governance, including