VP – Chief Information Security Officer

Wabtec Corporation is a leading global provider of equipment, systems, digital solutions and value-added services for freight and transit rail. Drawing on nearly four centuries of collective experience across Wabtec, GE Transportation and Faiveley Transport, the company has unmatched digital expertise, technological innovation, and world-class manufacturing and services, enabling the digital-rail-and-transit ecosystems. Wabtec is focused on performance that drives progress, creating transportation solutions that move and improve the world. Wabtec has approximately 27,000 employees in facilities throughout the world. Visit the company’s new website at: http://www.WabtecCorp.com.

It’s not just about your career… or your job title…it’s about who you are and the impact you are going to make on the world. Do you want to go into uncharted waters…do things that haven’t been done to make yours and someone else’s life better? Wabtec has been doing that for decades and we will continue to do so! Through our people, leadership development, services, technology and scale, Wabtec delivers better outcomes for global customers by speaking the language of industry.

Who will you be working with?

Our best-in-class Enterprise Information Security team has overarching responsibility for cyber security across our global Wabtec Enterprise. You will drive the strategy and define requirements to protect company assets and businesses.

How will you make a difference?

As a member of our IT leadership staff, Wabtec is looking for an individual to run a best-in-class Cyber Security & Risk function. The VP – Chief Information Security Officer reports directly to the CIO and is responsible for establishing and maintaining Wabtec’s enterprise information security policy and strategy, ensuring availability, integrity and confidentiality of customer, business partner, employee and business information. This position leads a global team that oversees the development, implementations, and enforcement of several key security domains including Security Operations, Application Security, Security Architecture, and Governance, Risk & Compliance (GRC). The right leader for this job will be passionate about security, both enterprise and product, and takes pride in developing people and process.

What do we want to know about you?

You must have:

• Degree in business administration or a technology-related field required
• Professional security management certification
• Minimum of 8 to 12 years of experience in a combination of risk management, information security and IT jobs
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST
• Excellent written and verbal communication skills and high level of personal integrity
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• Experience with contract and vendor negotiations and management including managed services
• Experience with Cloud computing/Elastic computing across virtualized environments
• Able and willing to travel, occasionally internationally, up to 20%

We would love it if you had:

• Advanced college degree in related technology field (Computer, Engineering, Science, etc.)
• Approximately 15+ years of experience in related IT roles
• Able to exhibit a progression of increasingly complex job responsibilities during the period inclusive of senior staff management oversight for large global organizations
• Drive efficiency through automation
• Strategic and creative thinking to analyze issues that may arise and create solutions
• Ability to respond positively to feedback and implement change in process and procedures as needed
• Ability to work in a fast-paced environment

What will your typical day look like?

• Develop, implement and monitor a strategic, comprehensive enterprise information security, product, and IT risk management program
• Work directly with the business units to facilitate risk assessment and risk management processes
• Develop and enhance an information security management framework
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services
• Provide leadership to the enterprise’s information security organization
• Partner with business stakeholders across the company to raise awareness of risk management concerns
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems
• Provide thought leadership and advice for Wabtec product development teams around tools and processes which would contribute to the overall cyber security of the Company’s commercial software products
• Supervisory Responsibilities
• Managing staff of 5 direct reports and an organization of 20-30 employees
• Monitoring and reviewing the work of staff members, including conducting annual performance reviews
• Participate in hiring and recruitment efforts, including interviews for employees in Security & Risk department
• Other duties as assigned

What about the physical demands of the job?

• Regularly remaining in a stationary position, often standing or sitting for prolonged periods
• Regularly communicating with others to exchange information
• Regularly required to attend meetings in person and virtually using video and audio computer equipment
• Regularly repeating motions that may include the wrists, hands and/or fingers, such as typing
• Occasionally moving about to accomplish tasks or moving from one worksite to another
• Occasionally light work that includes moving objects up to 20 pounds

Work Environment:

• Hybrid schedule at the Pittsburgh site three days per week.
• The employee will normally work in a temperature-controlled office environment, with frequent exposure to electronic office equipment. During visits to areas of operations, may be exposed to extreme cold or hot weather conditions. Is occasionally exposed to fumes or airborne particles, toxic or caustic chemicals, and loud noise

Relocation assistance may be provided if eligibility requirements are met.

Wabtec Corporation is committed to taking on the world’s toughest challenges. In order to fulfill that commitment we rely on a culture of leadership, diversity and inclusiveness. We aim to employ the world’s brightest minds to help us create a limitless source of ideas and opportunities. We believe in hiring talented people of varied backgrounds, experiences and styles…people like you! Wabtec Corporation is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, or protected Veteran status. If you have a disability or special need that requires accommodation, please let us know.

Read Full Description