We are looking for a talented Cybersecurity Assurance Analyst to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN.
In this role, you will make an impact in the following ways:
- Lead cybersecurity risk assessments by identifying, evaluating, and prioritizing threats using Cummins risk management frameworks to protect critical business assets.
- Drive effective risk mitigation strategies by providing expert guidance on risk severity, control effectiveness, and remediation planning.
- Ensure compliance with Cummins cybersecurity policies and industry data privacy principles, helping safeguard sensitive information and maintain regulatory alignment.
- Apply cybersecurity frameworks and standards such as NIST, ISO, ITIL, and COBIT to strengthen security controls and support consistent governance practices.
- Provide technical cybersecurity expertise for new and existing technology solutions, enabling secure design, implementation, and operation of business systems.
- Partner with business and technology stakeholders to evaluate evolving technology needs, delivering secure, scalable solutions that support organizational objectives.
- Build trusted relationships across teams and functions, serving as a strategic advisor who aligns cybersecurity initiatives with business priorities and value creation.
- Mentor and develop less experienced team members by sharing knowledge, fostering professional growth, and strengthening overall team cybersecurity capabilities.
To be successful in this role you will need the following:
- Action oriented - Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.
- Balances stakeholders - Anticipating and balancing the needs of multiple stakeholders.
- Business insight - Applying knowledge of business and the marketplace to advance the organization’s goals.
- Ensures accountability - Holding self and others accountable to meet commitments.
- Manages complexity - Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.
- Organizational savvy - Maneuvering comfortably through complex policy, process, and people-related organizational dynamics.
- Persuades - Using compelling arguments to gain the support and commitment of others.
- Resourcefulness - Securing and deploying resources effectively and efficiently.
- Tech savvy - Anticipating and adopting innovations in business-building digital and technology applications.
- Training Delivery - Instructs learners in a manner that engages and adjusts to individual and group needs resulting in knowledge, skills and abilities that can be applied on the job.
- Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.
- Regulatory Risk Compliance Management - Evaluates the design and effectiveness of controls against established industry frameworks and regulations to assess adherence with legal/regulatory requirements.
- Values differences - Recognizing the value that different perspectives and cultures bring to an organization.
Education, Licenses, Certifications:
- College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required.
- This position may require licensing for compliance with export controls or sanctions regulations.
Experience:
- Intermediate level of relevant work experience required.
- 3-5 years of experience
1. Cybersecurity Control Assessment & Validation:
Perform cybersecurity control assessments to evaluate control design and operating effectiveness across IT systems and processes.
Execute structured assessments aligned to Cummins frameworks and industry standards (e.g., NIST, ISO).
Analyze control implementations and identify gaps relative to regulatory and policy requirements.
Document assessment results, including control narratives, test procedures, and findings.
Provide objective, evidence-based evaluations of cybersecurity controls.
2. IT Audit & Assurance Support:
Support internal audits, external audits, and third-party certification assessments (e.g., CMMC, ISO 27001, NIS2).
Conduct control walkthroughs, interview stakeholders, and gather supporting documentation.
Perform evidence validation and traceability checks to confirm control execution.
Prepare audit-ready documentation, including control descriptions, test results, and evidence packages.
Ensure all audit artifacts meet quality, completeness, and consistency standards.
3. Regulatory Compliance, Continuous Improvement & Collaboration:
Assist in supporting compliance with CMMC/NIST 800-171, ISO 2700, NIS2, and UK Cyber Essentials.
Collaborate with IT, Cybersecurity, Compliance, and business stakeholders to support assessments and audits.
Identify opportunities to improve efficiency, consistency, and quality of cybersecurity assurance processes.
Support enhancements to tools, templates, and methodologies used for assessments and audits.
4. Documentation, Metrics, and Reporting:
Maintain documentation and records to support repeatable and scalable assurance activities.
Communicate status updates on assessments, audits, risks, and remediation tracking.
Prepare audit and compliance reporting materials and support certification readiness activities.
Track control deficiencies and remediation progress.
About UsCummins is an equal opportunity employer. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, sex, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity, or other status protected by law.Skills Required
- College, university, or equivalent degree in Cybersecurity, Computer Science, Information Technology, a related subject, or relevant equivalent experience
- 3-5 years of relevant work experience
- Cybersecurity control assessment and validation experience
- IT audit and assurance support experience
- Experience with cybersecurity frameworks and standards such as NIST and ISO
- Experience supporting CMMC/NIST 800-171, ISO 27001, NIS2, or UK Cyber Essentials compliance
- Ability to conduct control walkthroughs, interview stakeholders, validate evidence, and prepare audit-ready documentation
- This position may require licensing for export controls or sanctions compliance
Cummins Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Cummins and has not been reviewed or approved by Cummins.
-
Retirement Support — A 401(k) with company contribution/match and both defined contribution and defined benefit pension plans are offered, alongside profit sharing and an employee stock purchase plan. This mix supports long-term savings and financial security.
-
Healthcare Strength — Multiple medical plan options (HSA, HSA Plus, PPO) with dental, vision, life and long-term disability coverage are provided, along with telehealth, mental-health support, and wellness tools. In-network protections and HSA/HSA Plus structures are described to help manage costs.
-
Parental & Family Support — Paid maternity and paternity leave, family medical leave, and adoption assistance are offered. Reduced or flexible hours and unpaid extended leave options further support caregiving needs.
Cummins Insights
What We Do
At Cummins, we empower everyone to grow their careers through meaningful work, building inclusive and equitable teams, coaching, development and opportunities to make a difference. Across our entire organization, you'll find engineers, developers, and technicians who are innovating, designing, testing, and building. You'll also find accountants, marketers, as well as manufacturing, quality and supply chain specialists who are working with technology that's just as innovative and advanced.
