Business Risk Intelligence Analyst

Cummins•Columbus, OH

1d•Onsite

About The Position

Cummins is seeking a Business Risk Intelligence Analyst to join its Systems/Information Technology team within the Corporate organization in Columbus, Indiana. The role focuses on cybersecurity, technology, and operational risk intelligence, including identifying emerging risks, assessing potential business impacts, and translating technical findings into decision-ready insights for leadership. The analyst will monitor internal and external environments for emerging cyber, technology, regulatory, geopolitical, and operational risks; correlate information across cybersecurity, risk, audit, compliance, and business functions; and support enterprise risk assessments, key risk indicators, early-warning activities, scenario analysis, and strategic risk planning. The role also develops executive risk briefings, intelligence reports, trend analyses, and quarterly and annual Business Risk Intelligence reporting. The position partners with Cybersecurity, Enterprise Risk Management, Audit, Compliance, Privacy, Legal, IT, and business teams to gather and validate intelligence and improve analytical methods and reporting. It also involves applying cybersecurity risk management frameworks, advising stakeholders on security considerations for technology solutions, supporting policies and controls, and using AI-enabled tools and analytics with appropriate human oversight. The role includes coaching and developing less experienced team members and influencing risk-based business decisions.

Requirements

College, university, or equivalent degree in Cybersecurity, Computer Science, Information Technology, or a related subject, or relevant equivalent experience.
Intermediate level of relevant work experience; 3–5 years of experience.
Experience in cybersecurity, threat intelligence, risk analysis, or enterprise risk management.
Ability to analyze risk information and communicate technical findings as business-focused intelligence for leadership.
Knowledge of cyber threats, vulnerability management, risk frameworks, MITRE ATT&CK, threat intelligence, and business risk concepts is identified as preferred.
This position may require licensing for compliance with export controls or sanctions regulations.

Nice To Haves

Knowledge of cyber threats, vulnerability management, risk frameworks, MITRE ATT&CK, threat intelligence, and business risk concepts.

Responsibilities

Analyze cyber, technology, and operational risk information to identify emerging risks and potential business impacts.
Assess internal and external intelligence to support proactive risk identification and executive decision-making.
Translate technical findings into business-focused intelligence for leadership.
Monitor internal and external environments for emerging cyber, technology, regulatory, geopolitical, and operational risks.
Identify trends, patterns, and leading indicators that could affect enterprise objectives, and support early-warning activities through ongoing intelligence collection and analysis.
Correlate information from cybersecurity operations, vulnerability management, threat intelligence, audit, compliance, enterprise risk, and business functions.
Identify relationships between risk events, business impacts, and strategic priorities, and support development of enterprise Key Risk Indicators and Early Warning Indicators.
Develop executive risk briefings, intelligence reports, trend analyses, and emerging risk assessments for executive leadership, governance committees, and business stakeholders.
Contribute to quarterly and annual Business Risk Intelligence reporting.
Support enterprise risk assessments by evaluating likelihood, business impact, and possible mitigation strategies.
Assist leadership in prioritizing risks based on business context and organizational objectives, and contribute to scenario analysis and strategic risk planning.
Partner with Cybersecurity, Enterprise Risk Management, Audit, Compliance, Privacy, Legal, IT, and business teams to gather and validate intelligence.
Continuously improve intelligence methodologies, reporting standards, and analytical processes.
Use AI-enabled tools and analytics to improve intelligence products while ensuring appropriate human oversight.
Lead cybersecurity risk identification and assessment efforts using Cummins risk management frameworks to identify, evaluate, and mitigate security threats.
Advise business and technology stakeholders on cybersecurity for new and evolving technology solutions.
Drive implementation of cybersecurity policies, data privacy principles, and industry best practices to protect organizational assets and information.
Translate cybersecurity frameworks, including NIST, ISO, ITIL, and COBIT, into practical controls and processes aligned with business objectives.
Partner with cross-functional teams to evaluate technology changes and incorporate security requirements early in decision-making.
Coach, mentor, and develop less experienced team members.
Build stakeholder relationships using Business Relationship Management practices to deliver measurable business value.
Help leaders understand cybersecurity risks, prioritize mitigation strategies, and balance security with business needs.
Apply action orientation, stakeholder balancing, business insight, accountability, complexity management, organizational savvy, persuasion, resourcefulness, technology awareness, training delivery, cybersecurity risk management, regulatory risk compliance management, and appreciation of differing perspectives.