Senior Enterprise Vulnerability & Risk Leader

Wabtec Corporation; Waltham (MA); Hybrid; USD 105,000 - 149,000; Full time

Job summary

Wabtec Corporation is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across IT, OT, cloud, and applications. You will shape risk prioritization, remediation, and governance to reduce real-world exposure and inform executive decisions.

You will collaborate with infrastructure, cloud, applications, architecture, manufacturing, and the business to drive measurable improvements, build resilient controls, and support AI governance

Qualifications

• A bachelor's degree in computer science, information technology, cybersecurity, or related field, or equivalent practical experience. Candidates with at least five years of relevant cybersecurity experience.
• Experience leading or contributing to enterprise vulnerability management, exposure management, or cyber risk programs across multiple technology environments.
• Knowledge of vulnerability assessment technologies, remediation workflows, risk prioritization methods, and exposure management practices.
• Understanding of vulnerability scoring, threat intelligence, exploitability, business criticality, and risk-based remediation approaches.
• Strong understanding of AI, ML, and emerging AI technologies with governance frameworks for responsible AI adoption.
• Experience developing metrics, reports, or dashboards communicating cyber risk to technical and executive audiences.
• Experience extending vulnerability management into newly acquired environments, including asset discovery and remediation tracking.
• Experience with AWS or Azure and cloud security risks.
• Working knowledge of enterprise OS, networking, and infrastructure technologies.
• Experience collaborating with stakeholders to improve remediation outcomes across distributed environments.
• Strong communication, program execution, and stakeholder engagement skills.
• Experience organizing workstreams with IT service management or similar platforms.
• Ability to support weekend or off-shift work during incidents or maintenance.

Responsibilities

• Define, lead, and mature the enterprise vulnerability management strategy across IT, OT, cloud, and apps.
• Establish governance, standards, procedures, and metrics for a consistent view of cyber risk.
• Guide vulnerability identification, assessment, prioritization, remediation, validation, and exception management.
• Develop risk-based prioritization methods using threat intel and business criticality.
• Partner with infrastructure, cloud, applications, and business teams to enable timely remediation.
• Provide concise reporting on risk posture, trends, and program effectiveness.
• Oversee vulnerability assessment technologies and continuous monitoring capabilities.
• Analyze trends to recommend strategic risk reduction across the enterprise.

Skills

Vulnerability management leadership

Cyber risk management

Threat intelligence and remediation

AI governance

Metrics and dashboards

Stakeholder engagement

Incident response coordination

Cloud security (AWS/Azure)

Vulnerability scoring and remediation

Exposure management concepts

Education

Bachelor's degree in Computer Science / IT / Cybersecurity or related field

Tools

AWS

Azure

SIEM

Vulnerability assessment tools

Job description

Wabtec Corporation is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across IT, OT, cloud, and applications. You will shape risk prioritization, remediation, and governance to reduce real-world exposure and inform executive decisions.

You will collaborate with infrastructure, cloud, applications, architecture, manufacturing, and the business to drive measurable improvements, build resilient controls, and support AI governance