Additionalinformation

Additional Information

Our job titles may span more than one career level. The salary rate for this role is currently $104800-149300 The actual salary offered to a candidate may be influenced by a variety of factors, such as: training, transferable skills, work experience, education, business needs, market demands and work location. The base pay range is subject to change and may be modified in the future. More information on offered benefits, which include health, welfare, and retirement, are available at mywabtecbenefits.com. Other benefit offerings for this role may include annual bonus, if eligible.

What could you accomplish in a place that puts People First?

At Wabtec, it’s not just about a job - it’s about the impact you make. When our people come together, we’re Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you.

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together – are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.

Culture powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We’re building a culture where leadership, inclusion and your unique perspective fuel progress.

We’re proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we’ve got you.

Companydescription

Company Description

Jobdescription

Job Description

Who will you be working with?

Ready to lead meaningful change in enterprise security? Bring your experience, ideas, and curiosity to help us build what comes next. Join Wabtec's Enterprise Information Security team and help secure the technologies, operations, and digital platforms that keep the world moving. You will collaborate with experts across infrastructure, cloud, applications, architecture, manufacturing and the business - bringing people together to solve high-value security challenges on a global scale.

How will you make a difference?

As Enterprise Information Security Services Manager, you will take the lead in shaping Wabtec's enterprise vulnerability management program across on-premises, cloud, application, operational technology, and M&A environments. Reporting to the Enterprise Information Security Director, you will have the visibility, autonomy and influence to define how cyber risk is identified, prioritized, remediated, validated and communicated across a global organization.

This is a high-visibility opportunity to build smarter risk-based prioritization, create insights that inform executive decisions, and drive measurable improvements in resilience. You will help teams move from finding vulnerabilities to reducing real-world exposure—and contribute to forward-looking work in cloud security, automation, exposure management, and responsible artificial intelligence governance.

What do we want to know about you?

You must have:

• A bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. Candidates with at least five years of relevant cybersecurity experience are encouraged to apply.
• Experience leading or significantly contributing to enterprise vulnerability management, exposure management, or cyber risk management programs across multiple technology environments.
• Knowledge of vulnerability assessment technologies, remediation workflows, risk prioritization methods, and exposure management practices.
• Understanding of vulnerability scoring, threat intelligence, exploitability, business criticality, and risk-based remediation approaches.
• Strong understanding of artificial intelligence (AI), machine learning, and emerging AI technologies, with experience developing governance frameworks, risk management practices, and operational controls to support the secure, responsible and compliant adoption of AI across the enterprise.
• Experience developing meaningful metrics, reports, or dashboards that communicate cyber risk and remediation progress to technical and executive audiences.
• Experience extending vulnerability management and security controls into newly acquired environments, including asset discovery, scan enablement and remediation tracking through integration.
• Experience with public cloud platforms such as AWS or Azure and familiarity with cloud security risks, shared-responsibility models and cloud native application protection platforms.
• Working knowledge of enterprise operating systems, networking, system administration, applications, and infrastructure technologies.
• Experience collaborating with technical and business stakeholders to improve remediation outcomes across distributed or global environments.
• Strong communication, program execution, and stakeholder engagement skills, including the ability to explain complex risk in clear business terms.
• Experience organizing workstreams and maintaining operational transparency through IT service management or comparable workflow platforms.
• Ability to support occasional weekend or off-shift work during cybersecurity incidents, planned maintenance, or other business-critical events.

We would love it if you had:

• Experience implementing exposure management, attack surface management, or Continuous Threat Exposure Management (CTEM) practices.
• Experience supporting cybersecurity programs in manufacturing, industrial, OT, or industrial control system (ICS) environments.
• Experience integrating vulnerability management with Security Operations, Incident Response, architecture, engineering, or governance functions.
• Experience establishing or contributing to enterprise AI governance programs, including the development of policies, standards, risk management processes, oversight mechanisms and cross-functional operating models that enable responsible AI adoption while aligning with business objectives and regulatory expectations.
• Knowledge of containers, Kubernetes, and cloud-native security technologies.
• Experience presenting cyber risk, remediation performance, or program strategy to senior leaders.
• A collaborative leadership style, curiosity, sound judgment, and commitment to continuous learning in a changing cybersecurity landscape.

Excited by the opportunity but do not check every box? We still want to hear from you. We value transferable skills, varied perspectives, curiosity, and leaders who are ready to learn and make an impact.

What will your typical day look like?

• Define, lead, and continuously mature the enterprise vulnerability management strategy across IT, OT, cloud, applications, and other enterprise technology environments.
• Establish governance, standards, procedures, service expectations, metrics, and reporting that provide a consistent view of enterprise cyber risk.
• Guide vulnerability identification, assessment, prioritization, remediation, validation, and exception management across global environments.
• Develop and improve risk-based prioritization methods using threat intelligence, exploitability, business criticality, operational impact, and compensating controls.
• Partner with infrastructure, cloud, application, operations, manufacturing, architecture, and business teams to support timely, sustainable remediation.
• Set clear remediation objectives, monitor performance, identify barriers, and promote shared accountability for risk reduction.
• Provide concise, actionable reporting on risk posture, vulnerability trends, remediation performance, emerging threats, and program effectiveness.
• Oversee vulnerability assessment technologies, exposure management platforms, attack surface visibility, and continuous monitoring capabilities.
• Analyze trends and recurring weaknesses to recommend strategic improvements that reduce risk at scale.
• Collaborate with Security Operations and threat management teams to evaluate critical vulnerabilities, active threats, and newly disclosed security issues.
• Support cloud and application security initiatives by identifying vulnerabilities, misconfigurations, and exposure risks across multi-cloud and software environments.
• Partner with the M&A project team to assess acquired environments, define integration requirements, and validate that inherited assets meet Wabtec security standards prior to final security signoff.
• Maintain practical standards, technical guidance, operational runbooks and documentation that help teams apply vulnerability management processes consistently.
• Support audits, compliance obligations, regulatory requirements, and customer requests by providing evidence, metrics and subject matter expertise.
• Lead or contribute to cybersecurity projects involving process transformation, security tooling, data integration and enterprise risk reduction.
• Provide advanced guidance and escalation support for vulnerability management and related security technologies.
• Participate in cybersecurity incident response, emergency activities and planned maintenance during occasional weekend or off-hours periods when required.
• undefined

What about the physical demands of the job?

• Regularly remaining in a stationary position, often standing, or sitting for prolonged periods
• Regularly communicating with others to exchange information
• Regularly required to attend meetings in person and virtually using video and audio computer equipment
• Regularly repeating motions that may include the wrists, hands, and/or fingers, such as typing
• Occasionally moving about to accomplish tasks or moving from one worksite to another
• Occasionally light work that includes moving objects up to twenty pounds
• You may also be asked to perform other duties outside of your function or trade, for which adequate training will be provided if necessary.

Work Environment:

• Hybrid work schedule (both on-site and remote)The employee will normally work in a temperature-controlled office environment, with frequent exposure to electronic office equipment. During visits to areas of operations, they may be exposed to extreme cold or hot weather conditions. Is occasionally exposed to fumes or airborne particles, toxic or caustic chemicals, and loud noise.
• Relocation assistance not currently provided.

Qualifications