Manager, Services

Wabtec•Erie, PA

5d•Hybrid

About The Position

Ready to lead meaningful change in enterprise security? Bring your experience, ideas, and curiosity to help us build what comes next. Join Wabtec's Enterprise Information Security team and help secure the technologies, operations, and digital platforms that keep the world moving. You will collaborate with experts across infrastructure, cloud, applications, architecture, manufacturing and the business - bringing people together to solve high-value security challenges on a global scale.

Requirements

A bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
Candidates with at least five years of relevant cybersecurity experience are encouraged to apply.
Experience leading or significantly contributing to enterprise vulnerability management, exposure management, or cyber risk management programs across multiple technology environments.
Knowledge of vulnerability assessment technologies, remediation workflows, risk prioritization methods, and exposure management practices.
Understanding of vulnerability scoring, threat intelligence, exploitability, business criticality, and risk-based remediation approaches.
Strong understanding of artificial intelligence (AI), machine learning, and emerging AI technologies, with experience developing governance frameworks, risk management practices, and operational controls to support the secure, responsible and compliant adoption of AI across the enterprise.
Experience developing meaningful metrics, reports, or dashboards that communicate cyber risk and remediation progress to technical and executive audiences.
Experience extending vulnerability management and security controls into newly acquired environments, including asset discovery, scan enablement and remediation tracking through integration.
Experience with public cloud platforms such as AWS or Azure and familiarity with cloud security risks, shared-responsibility models and cloud native application protection platforms.
Working knowledge of enterprise operating systems, networking, system administration, applications, and infrastructure technologies.
Experience collaborating with technical and business stakeholders to improve remediation outcomes across distributed or global environments.
Strong communication, program execution, and stakeholder engagement skills, including the ability to explain complex risk in clear business terms.
Experience organizing workstreams and maintaining operational transparency through IT service management or comparable workflow platforms.
Ability to support occasional weekend or off-shift work during cybersecurity incidents, planned maintenance, or other business-critical events.

Nice To Haves

Experience implementing exposure management, attack surface management, or Continuous Threat Exposure Management (CTEM) practices.
Experience supporting cybersecurity programs in manufacturing, industrial, OT, or industrial control system (ICS) environments.
Experience integrating vulnerability management with Security Operations, Incident Response, architecture, engineering, or governance functions.
Experience establishing or contributing to enterprise AI governance programs, including the development of policies, standards, risk management processes, oversight mechanisms and cross-functional operating models that enable responsible AI adoption while aligning with business objectives and regulatory expectations.
Knowledge of containers, Kubernetes, and cloud-native security technologies.
Experience presenting cyber risk, remediation performance, or program strategy to senior leaders.
A collaborative leadership style, curiosity, sound judgment, and commitment to continuous learning in a changing cybersecurity landscape.

Responsibilities

Define, lead, and continuously mature the enterprise vulnerability management strategy across IT, OT, cloud, applications, and other enterprise technology environments.
Establish governance, standards, procedures, service expectations, metrics, and reporting that provide a consistent view of enterprise cyber risk.
Guide vulnerability identification, assessment, prioritization, remediation, validation, and exception management across global environments.
Develop and improve risk-based prioritization methods using threat intelligence, exploitability, business criticality, operational impact, and compensating controls.
Partner with infrastructure, cloud, application, operations, manufacturing, architecture, and business teams to support timely, sustainable remediation.
Set clear remediation objectives, monitor performance, identify barriers, and promote shared accountability for risk reduction.
Provide concise, actionable reporting on risk posture, vulnerability trends, remediation performance, emerging threats, and program effectiveness.
Oversee vulnerability assessment technologies, exposure management platforms, attack surface visibility, and continuous monitoring capabilities.
Analyze trends and recurring weaknesses to recommend strategic improvements that reduce risk at scale.
Collaborate with Security Operations and threat management teams to evaluate critical vulnerabilities, active threats, and newly disclosed security issues.
Support cloud and application security initiatives by identifying vulnerabilities, misconfigurations, and exposure risks across multi-cloud and software environments.
Partner with the M&A project team to assess acquired environments, define integration requirements, and validate that inherited assets meet Wabtec security standards prior to final security signoff.
Maintain practical standards, technical guidance, operational runbooks and documentation that help teams apply vulnerability management processes consistently.
Support audits, compliance obligations, regulatory requirements, and customer requests by providing evidence, metrics and subject matter expertise.
Lead or contribute to cybersecurity projects involving process transformation, security tooling, data integration and enterprise risk reduction.
Provide advanced guidance and escalation support for vulnerability management and related security technologies.
Participate in cybersecurity incident response, emergency activities and planned maintenance during occasional weekend or off-hours periods when required.