Manager, Services

Job Description Who will you be working with?

Ready to lead meaningful change in enterprise security? Bring your experience, ideas, and curiosity to help us build what comes next. Join Wabtec's Enterprise Information Security team and help secure the technologies, operations, and digital platforms that keep the world moving. You will collaborate with experts across infrastructure, cloud, applications, architecture, manufacturing and the business - bringing people together to solve high-value security challenges on a global scale.

How will you make a difference?

As Enterprise Information Security Services Manager, you will take the lead in shaping Wabtec's enterprise vulnerability management program across on-premises, cloud, application, operational technology, and M&A environments. Reporting to the Enterprise Information Security Director, you will have the visibility, autonomy and influence to define how cyber risk is identified, prioritized, remediated, validated and communicated across a global organization.

This is a high-visibility opportunity to build smarter risk-based prioritization, create insights that inform executive decisions, and drive measurable improvements in resilience. You will help teams move from finding vulnerabilities to reducing real-world exposure—and contribute to forward-looking work in cloud security, automation, exposure management, and responsible artificial intelligence governance.

What do we want to know about you?

You must have:

A bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. Candidates with at least five years of relevant cybersecurity experience are encouraged to apply.

Experience leading or significantly contributing to enterprise vulnerability management, exposure management, or cyber risk management programs across multiple technology environments.

Knowledge of vulnerability assessment technologies, remediation workflows, risk prioritization methods, and exposure management practices.

Understanding of vulnerability scoring, threat intelligence, exploitability, business criticality, and risk-based remediation approaches.

Strong understanding of artificial intelligence (AI), machine learning, and emerging AI technologies, with experience developing governance frameworks, risk management practices, and operational controls to support the secure, responsible and compliant adoption of AI across the enterprise.

Experience developing meaningful metrics, reports, or dashboards that communicate cyber risk and remediation progress to technical and executive audiences.

Experience extending vulnerability management and security controls into newly acquired environments, including asset discovery, scan enablement and remediation tracking through integration.

Experience with public cloud platforms such as AWS or Azure and familiarity with cloud security risks, shared-responsibility models and cloud native application protection platforms.

Working knowledge of enterprise operating systems, networking, system administration, applications, and infrastructure technologies.

Experience collaborating with technical and business stakeholders to improve remediation outcomes across distributed or global environments.

Strong communication, program execution, and stakeholder engagement skills, including the ability to explain complex risk in clear business terms.

Experience organizing work streams and maintaining operational transparency through IT service management or comparable workflow platforms.

Ability to support occasional weekend or off-shift work during cybersecurity incidents, planned maintenance, or other business-critical events.

We would love it if you had:

Experience implementing exposure…