Lead Counsel, Cybersecurity, Privacy & Digital Risk

Lead Counsel, Cybersecurity, Privacy & Digital Risk

Full-time role within the Legal Counsel family.

Location:

Pittsburgh, PA — hybrid schedule.

Chief Compliance Officer (Manager), CISO, Legal, Information Security, IT, HR, Procurement, and business leaders.

The Lead Counsel, Cybersecurity, Privacy & Digital Risk will shape and advance Wabtec’s global approach to cybersecurity, privacy, and digital risk. This is a highly strategic, board-visible role at the intersection of law, technology, and business transformation, supporting innovation across areas such as AI, connected devices, operational technology (OT), and critical infrastructure.

Based at Wabtec’s Headquarters in Pittsburgh, PA (hybrid schedule), this leader will partner closely with chief executives and cross‑functional teams to enable secure, compliant growth in a complex, global environment.

• Serve as a strategic advisor to executive leadership on cybersecurity, privacy, and digital risk, with visibility to senior leadership and the Board.
• Partner across Legal, Information Security, IT, HR, Procurement, and business teams to embed practical, risk‑based guidance into key initiatives—including AI, connected-device governance, and digital transformation programs
  .
• Provide counsel on OT/ICS cybersecurity
  , helping secure industrial and operational environments that underpin critical infrastructure.
• Advise on incident response and crisis management, ensuring legal and regulatory readiness in high‑stakes scenarios.
• Guide strategy around critical infrastructure risk
  , aligning legal oversight with evolving global security and resilience expectations.
• Translate evolving global cybersecurity and privacy requirements into clear, business‑aligned strategies that enable innovation while managing risk.
• Help mature and evolve a global program that goes beyond policy management, integrating cybersecurity, privacy, and governance into how the business operates, innovates, and scales.

• Strong legal experience advising on cybersecurity and privacy matters
  , including incident response, OT/ICS cybersecurity, critical infrastructure risk, and emerging technology governance.
• Ability to partner effectively with senior executives
  , influence outcomes, and communicate complex issues clearly to non‑technical stakeholders.
• A strategic, business‑oriented mindset with sound judgment and a pragmatic, risk‑based approach.
• Juris Doctor (JD) degree from an accredited law school.

This role is also eligible for a performance bonus. The salary range for this role is currently $164,900 – $235,000, depending on experience, skills, and location. Additional benefits include health, welfare, and retirement plans. More information is available at . Relocation assistance may be provided if eligibility requirements are met.

We’re proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more. Need accommodation? Just let us know – we’ve got you.