Enterprise Vulnerability & Risk Management Lead

Wabtec Corporation; Pittsburgh (Allegheny County); Hybrid; USD 105,000 - 149,000; Full time

Job summary

Wabtec Corporation is seeking a leader for Enterprise Information Security Services to shape and manage the vulnerability management program across on‑premises, cloud, and multi‑environment contexts. You will influence risk prioritization and remediation strategies at a global scale.

You will report to the Enterprise Information Security Director and drive measurable improvements in resilience, security controls, and executive reporting while supporting AI governance and cloud security

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• Experience leading enterprise vulnerability management programs across multiple technology environments.
• Knowledge of vulnerability assessment technologies and remediation workflows.
• Understanding of vulnerability scoring, threat intelligence, and risk-based remediation approaches.
• Experience with AI governance frameworks and responsible AI adoption.
• Proven ability to communicate cyber risk through metrics and executive reporting.

Responsibilities

• Define and mature the enterprise vulnerability management strategy across IT, OT, cloud, and applications.
• Establish governance, standards, and reporting to view enterprise cyber risk.
• Lead remediation prioritization and validation across global environments.
• Develop risk-based prioritization using threat intel, exploitability, and business impact.
• Collaborate with infrastructure, cloud, operations, and business teams for remediation.

Skills

Vulnerability management

Cyber risk management

AI governance

Cloud security

Threat intelligence

Stakeholder communication

Security incident response

Regulatory awareness

Education

Bachelor's degree or equivalent in CS/IT/Cybersecurity

Job description

Wabtec Corporation is seeking a leader for Enterprise Information Security Services to shape and manage the vulnerability management program across on‑premises, cloud, and multi‑environment contexts. You will influence risk prioritization and remediation strategies at a global scale.

You will report to the Enterprise Information Security Director and drive measurable improvements in resilience, security controls, and executive reporting while supporting AI governance and cloud security