Business Risk Intelligence Analyst

Cummins•Columbus, IN

10h•Onsite

About The Position

Cummins is seeking a Business Risk Intelligence Analyst for its Systems/Information Technology team within the Corporate organization in Columbus, Indiana. The role analyzes cyber, technology, operational, regulatory, geopolitical, and other risk information to identify emerging risks and potential business impacts, and translates technical findings into decision-ready intelligence for leadership and stakeholders. The analyst supports enterprise risk assessments, executive decision-making, scenario analysis, strategic risk planning, and the development of Key Risk Indicators and Early Warning Indicators. The role collaborates with Cybersecurity, Enterprise Risk Management, Audit, Compliance, Privacy, Legal, IT, and business teams; contributes to quarterly and annual Business Risk Intelligence reporting; and improves intelligence methodologies and analytical processes. The position also applies cybersecurity risk management frameworks and guidance to help assess and mitigate risks, protect organizational assets and information, and align security practices with business objectives. It includes using AI-enabled tools and analytics with appropriate human oversight and coaching less experienced team members.

Requirements

College, university, or equivalent degree in Cybersecurity, Computer Science, Information Technology, or a related subject, or relevant equivalent experience.
Intermediate-level relevant work experience; 3–5 years of experience.
Experience in cybersecurity, threat intelligence, risk analysis, or enterprise risk management.
Knowledge of cyber threats, vulnerability management, risk frameworks, MITRE ATT&CK, threat intelligence, and business risk concepts is listed as preferred.
The position may require licensing for compliance with export controls or sanctions regulations.

Nice To Haves

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Intelligence Studies, Risk Management, or a related field.
Knowledge of cyber threats, vulnerability management, risk frameworks, MITRE ATT&CK, threat intelligence, and business risk concepts.

Responsibilities

Lead cybersecurity risk identification and assessment using Cummins risk management frameworks to identify, evaluate, and mitigate security threats.
Advise business and technology stakeholders on cybersecurity considerations for new and evolving technology solutions.
Drive implementation of cybersecurity policies, data privacy principles, and industry best practices.
Translate frameworks such as NIST, ISO, ITIL, and COBIT into practical controls and processes aligned with business objectives.
Partner with cross-functional teams to evaluate technology changes and incorporate security requirements early in decision-making.
Coach, mentor, and develop less experienced team members.
Build and maintain stakeholder relationships using Business Relationship Management practices to deliver business value.
Help leaders understand cybersecurity risks, prioritize mitigation strategies, and balance security with business needs.
Analyze cyber, technology, and operational risk information to identify emerging risks and potential business impacts.
Assess internal and external intelligence to support proactive risk identification and executive decision-making.
Translate technical findings into business-focused intelligence for leadership.
Monitor internal and external environments for emerging cyber, technology, regulatory, geopolitical, and operational risks.
Identify trends, patterns, and leading indicators that could affect enterprise objectives, and support early-warning activities through ongoing intelligence collection and analysis.
Correlate information from cybersecurity operations, vulnerability management, threat intelligence, audit, compliance, enterprise risk, and business functions.
Identify relationships between risk events, business impacts, and strategic priorities; support development of enterprise KRIs and EWIs.
Develop executive risk briefings, intelligence reports, trend analyses, and emerging risk assessments tailored to leadership, governance committees, and business stakeholders.
Contribute to quarterly and annual Business Risk Intelligence reporting.
Support enterprise risk assessments by evaluating likelihood, business impact, and possible mitigation strategies.
Assist leadership in prioritizing risks based on business context and organizational objectives; contribute to scenario analysis and strategic risk planning.
Partner with Cybersecurity, Enterprise Risk Management, Audit, Compliance, Privacy, Legal, IT, and business teams to gather and validate intelligence.
Continuously improve intelligence methodologies, reporting standards, and analytical processes.
Use AI-enabled tools and analytics to improve intelligence-product efficiency, quality, and timeliness while ensuring appropriate human oversight.
Apply action orientation, stakeholder balancing, business insight, accountability, complexity management, organizational savvy, persuasion, resourcefulness, technology savvy, training delivery, cybersecurity risk management, regulatory risk compliance management, and appreciation of different perspectives.