Cybersecurity Assurance Analyst

Cummins•Columbus, IN

2d•Onsite

About The Position

We are looking for a talented Cybersecurity Assurance Analyst to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN. In this role, you will make an impact by leading cybersecurity risk assessments, driving effective risk mitigation strategies, ensuring compliance with cybersecurity policies and data privacy principles, applying cybersecurity frameworks, providing technical expertise for technology solutions, partnering with stakeholders to evaluate technology needs, building trusted relationships, and mentoring team members.

Requirements

College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required.
Intermediate level of relevant work experience required.
3-5 years of experience

Nice To Haves

This position may require licensing for compliance with export controls or sanctions regulations.

Responsibilities

Lead cybersecurity risk assessments by identifying, evaluating, and prioritizing threats using Cummins risk management frameworks to protect critical business assets.
Drive effective risk mitigation strategies by providing expert guidance on risk severity, control effectiveness, and remediation planning.
Ensure compliance with Cummins cybersecurity policies and industry data privacy principles, helping safeguard sensitive information and maintain regulatory alignment.
Apply cybersecurity frameworks and standards such as NIST, ISO, ITIL, and COBIT to strengthen security controls and support consistent governance practices.
Provide technical cybersecurity expertise for new and existing technology solutions, enabling secure design, implementation, and operation of business systems.
Partner with business and technology stakeholders to evaluate evolving technology needs, delivering secure, scalable solutions that support organizational objectives.
Build trusted relationships across teams and functions, serving as a strategic advisor who aligns cybersecurity initiatives with business priorities and value creation.
Mentor and develop less experienced team members by sharing knowledge, fostering professional growth, and strengthening overall team cybersecurity capabilities.
Perform cybersecurity control assessments to evaluate control design and operating effectiveness across IT systems and processes.
Execute structured assessments aligned to Cummins frameworks and industry standards (e.g., NIST, ISO).
Analyze control implementations and identify gaps relative to regulatory and policy requirements.
Document assessment results, including control narratives, test procedures, and findings.
Provide objective, evidence-based evaluations of cybersecurity controls.
Support internal audits, external audits, and third-party certification assessments (e.g., CMMC, ISO 27001, NIS2).
Conduct control walkthroughs, interview stakeholders, and gather supporting documentation.
Perform evidence validation and traceability checks to confirm control execution.
Prepare audit-ready documentation, including control descriptions, test results, and evidence packages.
Ensure all audit artifacts meet quality, completeness, and consistency standards.
Assist in supporting compliance with CMMC/NIST 800-171, ISO 2700, NIS2, and UK Cyber Essentials.
Collaborate with IT, Cybersecurity, Compliance, and business stakeholders to support assessments and audits.
Identify opportunities to improve efficiency, consistency, and quality of cybersecurity assurance processes.
Support enhancements to tools, templates, and methodologies used for assessments and audits.
Maintain documentation and records to support repeatable and scalable assurance activities.
Communicate status updates on assessments, audits, risks, and remediation tracking.
Prepare audit and compliance reporting materials and support certification readiness activities.
Track control deficiencies and remediation progress.