Lead Counsel, Cybersecurity, Privacy & Digital Risk

Wabtec•Cleveland, PA

3d•Hybrid

About The Position

The Lead Counsel, Cybersecurity, Privacy & Digital Risk will shape and advance Wabtec’s global approach to cybersecurity, privacy, and digital risk. This is a highly strategic, board-visible role at the intersection of law, technology, and business transformation, supporting innovation across areas such as AI, connected devices, operational technology (OT), and critical infrastructure. Based at Wabtec’s Headquarters in Pittsburgh, PA (hybrid schedule), this leader will partner closely with chief executives and cross-functional teams to enable secure, compliant growth in a complex, global environment.

Requirements

Strong legal experience advising on cybersecurity and privacy matters, including areas such as incident response, OT/ICS cybersecurity, critical infrastructure risk, and emerging technology governance
Ability to partner effectively with senior executives, influence outcomes, and communicate complex issues clearly to non-technical stakeholders
A strategic, business-oriented mindset with sound judgment and a pragmatic, risk-based approach
Juris Doctor (JD) degree from an accredited law school.

Responsibilities

Serve as a strategic advisor to executive leadership on cybersecurity, privacy, and digital risk, with visibility to senior leadership and the Board.
Partners across Legal, Information Security, IT, HR, Procurement, and business teams to embed practical, risk-based guidance into key initiatives—including AI, connected-device governance, and digital transformation programs.
Provide counsel on OT/ICS cybersecurity, helping secure industrial and operational environments that underpin critical infrastructure.
Advise on incident response and crisis management, ensuring legal and regulatory readiness in high-stakes scenarios.
Guide strategy around critical infrastructure risk, aligning legal oversight with evolving global security and resilience expectations.
Translate evolving global cybersecurity and privacy requirements into clear, business-aligned strategies that enable innovation while managing risk.
Help mature and evolve a global program that goes beyond policy management, integrating cybersecurity, privacy, and governance into how the business operates, innovates, and scales.