About this role
We are looking for a talented Business Risk Intelligence Analyst to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN.
In this role, you will make an impact in the following ways:
- Lead cybersecurity risk identification and assessment efforts by applying Cummins risk management frameworks to proactively identify, evaluate, and mitigate security threats.
- Serve as a trusted advisor to business and technology stakeholders, providing expert cybersecurity guidance for new and evolving technology solutions.
- Drive the implementation of cybersecurity policies, data privacy principles, and industry best practices to protect organizational assets and information.
- Translate cybersecurity frameworks such as NIST, ISO, ITIL, and COBIT into practical controls and processes that align with Cummins' business objectives.
- Partner with cross-functional teams to evaluate technology changes, ensuring security requirements are incorporated early in the decision-making process.
- Coach, mentor, and develop less experienced team members, strengthening the overall cybersecurity capabilities of the organization.
- Build and maintain strong stakeholder relationships, leveraging Business Relationship Management practices to deliver measurable business value.
- Influence risk-based decision-making by helping leaders understand cybersecurity risks, prioritize mitigation strategies, and balance security with business needs.
Risk Intelligence Analysis
* Analyze cyber, technology, and operational risk information to identify emerging risks and potential business impacts.
* Assess internal and external intelligence to support proactive risk identification and executive decision-making.
* Translate technical findings into business-focused intelligence for leadership.
Emerging Risk Monitoring
* Monitor internal and external environments for emerging cyber, technology, regulatory, geopolitical, and operational risks.
* Identify trends, patterns, and leading indicators that could impact enterprise objectives.
* Support early warning activities through continuous intelligence collection and analysis.
Risk Correlation
* Correlate information from cybersecurity operations, vulnerability management, threat intelligence, audit, compliance, enterprise risk, and business functions.
* Identify relationships between risk events, business impacts, and strategic priorities.
* Support development of enterprise Key Risk Indicators (KRIs) and Early Warning Indicators (EWIs).
Intelligence Reporting
* Develop executive risk briefings, intelligence reports, trend analyses, and emerging risk assessments.
* Produce decision-ready intelligence tailored for executive leadership, governance committees, and business stakeholders.
* Contribute to quarterly and annual Business Risk Intelligence reporting.
Risk Assessment & Decision Support
* Support enterprise risk assessments by evaluating likelihood, business impact, and potential mitigation strategies.
* Assist leadership in prioritizing risks based on business context and organizational objectives.
* Contribute to scenario analysis and strategic risk planning activities.
Collaboration & Continuous Improvement
* Partner with Cybersecurity, Enterprise Risk Management, Audit, Compliance, Privacy, Legal, IT, and business teams to gather and validate intelligence.
* Continuously improve intelligence methodologies, reporting standards, and analytical processes.
* Leverage AI-enabled tools and analytics to improve the efficiency, quality, and timeliness of intelligence products while ensuring appropriate human oversight.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Intelligence Studies, Risk Management, or related field. Experience in cybersecurity, threat intelligence, risk analysis, or enterprise risk management. Knowledge of cyber threats, vulnerability management, risk frameworks, MITRE ATT&CK, threat intelligence, and business risk concepts preferred.