Hybrid Global Vulnerability Management Leader

Wabtec Corporation; Fort Worth, Northern (TX, KY); Hybrid; USD 105,000 - 149,000; Full time

Job summary

Wabtec Corporation is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across on-prem, cloud, applications, OT, and M&A environments, reporting to the Enterprise Information Security Director.

You will shape risk-based prioritization, deliver dashboards and metrics to executives, and drive measurable improvements in resilience, collaborating with infrastructure, cloud, and business teams globally.

Qualifications

• Bachelor's degree or equivalent with 5+ years in cybersecurity.
• Experience leading enterprise vulnerability management programs.
• Knowledge of vulnerability assessment technologies and remediation workflows.
• Understanding of vulnerability scoring, threat intelligence and risk-based remediation.
• Strong knowledge of AI governance, risk management, and responsible AI practices.
• Experience developing metrics, reports, or dashboards for cyber risk.
• Experience extending vulnerability management to newly acquired environments.
• Experience with AWS or Azure and cloud security risks.
• Knowledge of enterprise OS, networking, and infra technologies.
• Ability to communicate risk to executives and stakeholders.
• Experience organizing workstreams and ITSM-like workflows.
• Willingness for weekend/off-hours during incidents.

Responsibilities

• Define and mature the enterprise vulnerability management strategy across IT, OT, cloud, applications, and other enterprise technology environments.
• Establish governance, standards, procedures, service expectations, metrics, and reporting that provide a consistent view of enterprise cyber risk.
• Guide vulnerability identification, assessment, prioritization, remediation, validation, and exception management across global environments.
• Develop and improve risk-based prioritization methods using threat intelligence, exploitability, business criticality, operational impact, and compensating controls.
• Partner with infrastructure, cloud, application, operations, manufacturing, architecture, and business teams to support timely, sustainable remediation.
• Set clear remediation objectives, monitor performance, identify barriers, and promote shared accountability for risk reduction.
• Provide concise, actionable reporting on risk posture, vulnerability trends, remediation performance, emerging threats, and program effectiveness.
• Oversee vulnerability assessment technologies, exposure management platforms, attack surface visibility, and continuous monitoring capabilities.
• Analyze trends and recurring weaknesses to recommend strategic improvements that reduce risk at scale.
• Collaborate with Security Operations and threat management teams to evaluate critical vulnerabilities, active threats, and newly disclosed security issues.
• Support cloud and application security initiatives by identifying vulnerabilities, misconfigurations, and exposure risks across multi-cloud and software environments.
• Partner with the M&A project team to assess acquired environments, define integration requirements, and validate that inherited assets meet security standards prior to final sign-off.
• Maintain practical standards, technical guidance, runbooks and documentation for vulnerability management processes.
• Support audits, compliance obligations, regulatory requirements, and customer requests by providing evidence, metrics and SME knowledge.
• Lead or contribute to cybersecurity projects involving process transformation, security tooling, data integration and enterprise risk reduction.
• Provide advanced guidance and escalation support for vulnerability management and related security technologies.
• Participate in cybersecurity incident response, emergency activities and planned maintenance during off-hours as required.

Skills

Enterprise vulnerability management

Cloud security

AI governance

Threat intelligence

Risk-based remediation

Metrics & dashboards

Cross-functional collaboration

Public cloud AWS/Azure

Vulnerability scoring

Incident response coordination

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Vulnerability assessment tools

Job description

Wabtec Corporation is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across on-prem, cloud, applications, OT, and M&A environments, reporting to the Enterprise Information Security Director.

You will shape risk-based prioritization, deliver dashboards and metrics to executives, and drive measurable improvements in resilience, collaborating with infrastructure, cloud, and business teams globally.