Business Risk Intelligence Analyst

We are looking for a talented Business Risk Intelligence Analyst to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN.

• Lead cybersecurity risk identification and assessment efforts by applying Cummins risk management frameworks to proactively identify, evaluate, and mitigate security threats.

• Serve as a trusted advisor to business and technology stakeholders, providing expert cybersecurity guidance for new and evolving technology solutions.

• Drive the implementation of cybersecurity policies, data privacy principles, and industry best practices to protect organizational assets and information.

• Translate cybersecurity frameworks such as NIST, ISO, ITIL, and COBIT into practical controls and processes that align with Cummins' business objectives.

• Partner with cross-functional teams to evaluate technology changes, ensuring security requirements are incorporated early in the decision-making process.

• Coach, mentor, and develop less experienced team members, strengthening the overall cybersecurity capabilities of the organization.

• Build and maintain strong stakeholder relationships, leveraging Business Relationship Management practices to deliver measurable business value.

• Influence risk-based decision-making by helping leaders understand cybersecurity risks, prioritize mitigation strategies, and balance security with business needs.

Action oriented
- Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.

Balances stakeholders
- Anticipating and balancing the needs of multiple stakeholders.

Business insight
- Applying knowledge of business and the marketplace to advance the organization’s goals.

Ensures accountability
- Holding self and others accountable to meet commitments.

Manages complexity
- Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.

Organizational savvy
- Maneuvering comfortably through complex policy, process, and people-related organizational dynamics.

Persuades
- Using compelling arguments to gain the support and commitment of others.

Resourcefulness
- Securing and deploying resources effectively and efficiently.

Tech savvy
- Anticipating and adopting innovations in business-building digital and technology applications.

Training Delivery
- Instructs learners in a manner that engages and adjusts to individual and group needs resulting in knowledge, skills and abilities that can be applied on the job.

Cybersecurity Risk Management
- Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.

Regulatory Risk Compliance Management
- Evaluates the design and effectiveness of controls against established industry frameworks and regulations to assess adherence with legal/regulatory requirements.

Values differences
- Recognizing the value that different perspectives and cultures bring to an organization.

College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required. This position may require licensing for compliance with export controls or sanctions regulations.

Intermediate level of relevant work experience required. 3-5 years of experience

• Analyze cyber, technology, and operational risk information to identify emerging risks and potential business impacts.

• Assess internal and external intelligence to support proactive risk identification and executive decision-making.

• Translate technical findings into business-focused intelligence for leadership.

• Monitor internal and external environments for emerging cyber, technology, regulatory, geopolitical, and operational risks.

• Identify trends, patterns, and leading indicators that could impact enterprise objectives.

• Support early warning activities through continuous intelligence collection and analysis.

• Correlate information from cybersecurity operations, vulnerability management, threat intelligence, audit, compliance, enterprise risk, and business functions.

• Identify relationships between risk events, business impacts, and…