Strategic Enterprise Security Services Manager

Wabtec; Massachusetts; Hybrid; USD 105,000 - 149,000; Full time

Job summary

Wabtec is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across on-premises, cloud, application, OT, and M&A environments. You will define how cyber risk is identified, prioritized, remediated, validated and communicated across a global organization.

You will help teams move from finding vulnerabilities to reducing real-world exposure, shaping risk-based prioritization, and delivering insights for executives.

Qualifications

• Bachelor's degree or equivalent practical experience in computer science or related field, with 5+ years of cybersecurity experience
• Experience leading enterprise vulnerability management programs across IT/OT/cloud
• Knowledge of vulnerability assessment tools, remediation workflows, risk prioritization, exposure management
• Understanding of vulnerability scoring, threat intel, exploitability, business criticality
• Experience with AI governance, governance frameworks and controls for responsible AI adoption
• Experience producing metrics/dashboards communicating cyber risk to technical and executive audiences
• Experience extending VM into newly acquired environments and cloud services
• Experience with AWS or Azure and cloud native security platforms
• Strong cross-functional collaboration and stakeholder engagement
• Ability to work weekend/off-hours during incidents or maintenance

Responsibilities

• Define and mature the enterprise vulnerability management strategy across IT, OT, cloud, apps and infrastructure
• Establish governance, standards, procedures, service expectations, metrics and reporting for cyber risk
• Guide vulnerability identification, assessment, prioritization, remediation validation and exception management globally
• Develop risk-based prioritization using threat intel, exploitability, business criticality and controls
• Partner with infrastructure, cloud, apps, operations, manufacturing and architecture teams for timely remediation
• Provide actionable risk posture reporting and remediation progress to executives
• Oversee VM tools, exposure management platforms, and attack surface visibility
• Collaborate with Security Operations and threat teams to assess critical vulnerabilities
• Support cloud and application security initiatives across multi-cloud environments
• Assist M&A teams to assess acquired environments for security readiness

Skills

Enterprise vulnerability management

Exposure management

Cyber risk management

AI governance

Metrics & dashboards

Cloud platforms (AWS/Azure)

Threat intelligence

Disposition & remediation workflows

Stakeholder communication

OCR/IT service mgmt/workflow tools

Education

Bachelor's degree in CS/IT/Cybersecurity

Job description

Wabtec is seeking an Enterprise Information Security Services Manager to lead the enterprise vulnerability management program across on-premises, cloud, application, OT, and M&A environments. You will define how cyber risk is identified, prioritized, remediated, validated and communicated across a global organization.

You will help teams move from finding vulnerabilities to reducing real-world exposure, shaping risk-based prioritization, and delivering insights for executives.