Hybrid Enterprise Security Lead — Vulnerability Management

Wabtec Corporation; Chicago (IL); Hybrid; USD 105,000 - 149,000; Full time

Job summary

Wabtec Corporation in Chicago, IL is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across on-prem, cloud, and OT environments.

You will drive risk-based prioritization, create insights for executives, and partner with infrastructure, cloud, and application teams to reduce real-world exposure while shaping AI governance and incident response.

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity or related field.
• 5+ years of enterprise cybersecurity experience preferred.
• Experience leading vulnerability/exposure management programs.
• Knowledge of vulnerability scoring, threat intel, and risk-based remediation.
• Ability to communicate risk to technical and executive audiences.

Responsibilities

• Define and lead the enterprise vulnerability management strategy across IT, OT, cloud and applications.
• Establish governance, standards, metrics, and reporting for cyber risk.
• Guide remediation prioritization and validation across global environments.
• Develop risk-based prioritization using threat intel and business impact.
• Partner with infrastructure, cloud, applications, and business teams for remediation.
• Provide reporting on risk posture, trends, and program effectiveness.

Skills

Enterprise vulnerability management

Exposure management

Cyber risk management

AI governance frameworks

Metrics and dashboards

Cross-functional leadership

Stakeholder engagement

Threat intelligence

Cloud security (AWS/Azure)

Education

Bachelor's degree in computer science, information technology, cybersecurity, or related field

5+ years cybersecurity experience

Tools

AWS

Azure

Kubernetes

Job description

Wabtec Corporation in Chicago, IL is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across on-prem, cloud, and OT environments.

You will drive risk-based prioritization, create insights for executives, and partner with infrastructure, cloud, and application teams to reduce real-world exposure while shaping AI governance and incident response.