Global Enterprise Security Services Lead

Wabtec; Pennsylvania; Hybrid; USD 105,000 - 149,000; Full time

Benefits offered by this job

Annual bonus

Benefits package

Job summary

Wabtec is seeking an Enterprise Information Security Services Manager to lead the vulnerability management program across IT, OT, cloud, and applications. You will shape risk-based prioritization, drive remediation, and communicate cyber risk to executives in a global organization.

You will collaborate with infrastructure, cloud, architecture, and business teams, develop metrics, and influence security governance for responsible AI adoption.

Qualifications

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or related field, or equivalent practical experience.
• Candidates with at least five years of relevant cybersecurity experience are encouraged to apply.
• Experience leading or significantly contributing to enterprise vulnerability management, exposure management, or cyber risk management programs across multiple technology environments.
• Knowledge of vulnerability assessment technologies, remediation workflows, risk prioritization methods, and exposure management practices.
• Understanding of vulnerability scoring, threat intelligence, exploitability, business criticality, and risk-based remediation approaches.
• Strong understanding of AI, machine learning, and emerging AI technologies, with governance frameworks and risk management for responsible AI adoption.
• Experience developing metrics, reports, or dashboards communicating cyber risk and remediation progress to technical and executive audiences.
• Experience extending vulnerability management into acquired environments, including asset discovery, scan enablement and remediation tracking.
• Experience with AWS or Azure and familiarity with cloud security risks and shared-responsibility models.

Responsibilities

• Define, lead, and mature the enterprise vulnerability management strategy across IT, OT, cloud, applications, and other environments.
• Establish governance, standards, procedures, service expectations, metrics, and reporting for cyber risk.
• Guide identification, assessment, prioritization, remediation, validation, and exception management across global environments.
• Develop risk-based prioritization using threat intel, exploitability, business criticality, and operational impact.
• Partner with infrastructure, cloud, applications, operations, manufacturing, architecture, and business teams for remediation.
• Set remediation objectives, monitor performance, and promote shared accountability.
• Provide concise reporting on risk posture, trends, and program effectiveness.
• Oversee vulnerability assessment tech, exposure management platforms, attack surface visibility, and monitoring.
• Analyze trends to recommend scalable improvements reducing risk.
• Collaborate with Security Operations to evaluate vulnerabilities and threats.
• Support cloud and application security by identifying misconfigurations and exposure risks across multi-cloud.
• Assist M&A teams to assess acquired environments for security readiness.
• Maintain standards, runbooks, and documentation for consistent processes.
• Support audits and regulatory requirements with evidence and SME input.
• Lead security technology projects and incident response involvement.
• Participate in weekend or off-hours incident response as needed.

Skills

Enterprise vulnerability management

Exposure management

Cyber risk management

AI governance

Threat intelligence

Executive reporting

Cross-functional collaboration

Stakeholder engagement

Incident response support

Education

Bachelor's degree in computer science, IT, cybersecurity, or related field

Tools

Vulnerability assessment tools

Exposure management platforms

Attack surface management

Cloud security platforms (AWS/Azure)

Job description

Wabtec is seeking an Enterprise Information Security Services Manager to lead the vulnerability management program across IT, OT, cloud, and applications. You will shape risk-based prioritization, drive remediation, and communicate cyber risk to executives in a global organization.

You will collaborate with infrastructure, cloud, architecture, and business teams, develop metrics, and influence security governance for responsible AI adoption.