Business Risk Intelligence Analyst

We are looking for a talented Business Risk Intelligence Analyst to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN. 

In this role, you will make an impact in the following ways:

• Lead cybersecurity risk identification and assessment efforts by applying Cummins risk management frameworks to proactively identify, evaluate, and mitigate security threats.
• Serve as a trusted advisor to business and technology stakeholders, providing expert cybersecurity guidance for new and evolving technology solutions.
• Drive the implementation of cybersecurity policies, data privacy principles, and industry best practices to protect organizational assets and information.
• Translate cybersecurity frameworks such as NIST, ISO, ITIL, and COBIT into practical controls and processes that align with Cummins' business objectives.
• Partner with cross-functional teams to evaluate technology changes, ensuring security requirements are incorporated early in the decision-making process.
• Coach, mentor, and develop less experienced team members, strengthening the overall cybersecurity capabilities of the organization.
• Build and maintain strong stakeholder relationships, leveraging Business Relationship Management practices to deliver measurable business value.
• Influence risk-based decision-making by helping leaders understand cybersecurity risks, prioritize mitigation strategies, and balance security with business needs.

To be successful in this role you will need the following:

Action oriented - Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.

Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders.

Business insight - Applying knowledge of business and the marketplace to advance the organization’s goals.

Ensures accountability - Holding self and others accountable to meet commitments.

Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.

Organizational savvy - Maneuvering comfortably through complex policy, process, and people-related organizational dynamics.

Persuades - Using compelling arguments to gain the support and commitment of others.

Resourcefulness - Securing and deploying resources effectively and efficiently.

Tech savvy - Anticipating and adopting innovations in business-building digital and technology applications.

Training Delivery - Instructs learners in a manner that engages and adjusts to individual and group needs resulting in knowledge, skills and abilities that can be applied on the job.

Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.

Regulatory Risk Compliance Management - Evaluates the design and effectiveness of controls against established industry frameworks and regulations to assess adherence with legal/regulatory requirements. 

Values differences - Recognizing the value that different perspectives and cultures bring to an organization. 

 

Education, Licenses, Certifications: 
College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required. This position may require licensing for compliance with export controls or sanctions regulations. 

 

Experience: 
Intermediate level of relevant work experience required. 3-5 years of experience

Risk Intelligence Analysis

* Analyze cyber, technology, and operational risk information to identify emerging risks and potential business impacts.

* Assess internal and external intelligence to support proactive risk identification and executive decision-making.

* Translate technical findings into business-focused intelligence for leadership.

Emerging Risk Monitoring

* Monitor internal and external environments for emerging cyber, technology, regulatory, geopolitical, and operational risks.

* Identify trends, patterns, and leading indicators that could impact enterprise objectives.

* Support early warning activities through continuous intelligence collection and analysis.

Risk Correlation

* Correlate information from cybersecurity operations, vulnerability management, threat intelligence, audit, compliance, enterprise risk, and business functions.

* Identify relationships between risk events, business impacts, and strategic priorities.

* Support development of enterprise Key Risk Indicators (KRIs) and Early Warning Indicators (EWIs).

Intelligence Reporting

* Develop executive risk briefings, intelligence reports, trend analyses, and emerging risk assessments.

* Produce decision-ready intelligence tailored for executive leadership, governance committees, and business stakeholders.

* Contribute to quarterly and annual Business Risk Intelligence reporting.

Risk Assessment & Decision Support

* Support enterprise risk assessments by evaluating likelihood, business impact, and potential mitigation strategies.

* Assist leadership in prioritizing risks based on business context and organizational objectives.

* Contribute to scenario analysis and strategic risk planning activities.

Collaboration & Continuous Improvement

* Partner with Cybersecurity, Enterprise Risk Management, Audit, Compliance, Privacy, Legal, IT, and business teams to gather and validate intelligence.

* Continuously improve intelligence methodologies, reporting standards, and analytical processes.

* Leverage AI-enabled tools and analytics to improve the efficiency, quality, and timeliness of intelligence products while ensuring appropriate human oversight.

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Intelligence Studies, Risk Management, or related field. Experience in cybersecurity, threat intelligence, risk analysis, or enterprise risk management. Knowledge of cyber threats, vulnerability management, risk frameworks, MITRE ATT&CK, threat intelligence, and business risk concepts preferred.