Cybersecurity Director

Cummins Inc.

. Own the global strategy, leadership, and maturity of Application Security, Vulnerability Management, Cloud Security, and Penetration Testing .

Posted 10/10/2026full-timeRemote • United StatesLead💰 $180,600 - $265,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Application Security, Vulnerability Management, and Cloud Security, with a strong focus on risk assessment, compliance frameworks, and security validation. Proven ability to lead cross-functional teams and influence enterprise risk prioritization while balancing security and business needs.

Highest-signal resume keywords

Application Security OversightVulnerability ManagementCloud Security StrategyPenetration TestingCybersecurity Risk Mitigation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Exposures EvaluationRisk-Based PrioritizationSecurity-By-Design PracticesThreat IntelligenceExploitability AssessmentAnomaly DetectionIdentity And Access ManagementNetwork SecurityData AnalyticsSecurity And Risk Management

Soft Skills

LeadershipInfluencePartnershipAccountabilityCommunication

Tools & Technologies

SIEMIDS/IPSDeep Packet InspectionCloud InfrastructureAutomation Tools

Certifications & Qualifications

GIAC Security Essentials CertificationGIAC Security Leadership CertificationISACA Certified Information Security ManagerMicrosoft Certified Systems Engineer: SecurityCISSP Certification

Industry Keywords

Compliance FrameworksCyber GRCRisk MethodologiesMaterial Risk EscalationSecure Adoption Of AI

Tech Stack

Tools & technologies

CloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Own the global strategy, leadership, and maturity of Application Security, Vulnerability Management, Cloud Security, and Penetration Testing
Identify and evaluate cybersecurity exposures across applications, infrastructure, cloud environments, products, and technology platforms
Partner with risk owners to mitigate cybersecurity risks
Translate technical security findings into business risk and influence enterprise risk prioritization
Strengthen compliance and control frameworks and provide measurable evidence of risk reduction
Champion Application Security oversight and security-by-design practices across product development, SDLC, DevSecOps, and application processes
Lead enterprise vulnerability identification, prioritization, remediation, and validation
Establish risk-based prioritization using exploitability, threat intelligence, and exposure
Lead global Cloud Security strategy and requirements and manage risks across cloud infrastructure, workloads, identities, configurations, applications, and data
Develop the penetration testing service offering with Internal Audit and stakeholders
Validate vulnerabilities and controls through penetration testing and red team exercises
Identify exploitable attack paths and systemic weaknesses with purple team partners
Partner with Cyber GRC on risk methodologies, metrics, assessments, policies, controls, compliance, risk acceptance, and material risk escalation
Support secure adoption of Frontier AI and emerging technologies
Identify opportunities to use AI for vulnerability prioritization, security testing, risk analysis, automation, and cyber defense
Lead globally through influence, partnership, and accountability across Cyber Security, GRC, Product, Engineering, Cloud, Infrastructure, IT, and business organizations
Balance security requirements with business priorities, operational needs, cost, and innovation
Drive reduced material cybersecurity risk, faster remediation, secure-by-design adoption, effective security validation, executive cyber-risk visibility, and increased automation

Requirements

What you’ll need

College, university, or equivalent degree in Computer Science, Information Technology, Engineering, or related subject, or relevant equivalent experience required
GIAC Security Essentials Certification, GIAC Security Leadership Certification, ISACA Certified Information Security Manager, Microsoft Certified Systems Engineer: Security, or CISSP certification preferred
Understanding of industrial cybersecurity controls and solutions, including asset management, vulnerability management, anomaly detection, identity and access management, network security, endpoint security, application security, IDS/IPS, deep packet inspection, SIEM, data analytics, security and/or risk management, and product development
Position may require licensing for compliance with export controls or sanctions regulations
Must be based in one of the allowable U.S. states or Washington, D.C.

Benefits

Comp & perks

Off-site remote work
Equal employment opportunities
No relocation required/relocation not eligible