Operational Risk Manager Jobs in Bloomington, IN

Job Summary:

Responsible for leading the organization's cybersecurity operations team, with a primary focus on incident response, threat monitoring, and the execution of cybersecurity strategies, policies, and risk management practices to safeguard the organization's systems, data, and infrastructure. The manager serves as a coach and mentor to security professionals, builds operational processes aligned with best practices and industry standards, and partners with engineering, IT, and business to protect critical systems, infrastructure, and data from evolving threats. Serves as an accountable leader for the people, processes, and technologies that prevent, detect, investigate, and contain cyber threats across enterprise, cloud, and OT environments. Owns SecOps outcomes (247 monitoring & incident response), the detection engineering program (use-case lifecycle, signal quality, automation), and the threat hunting program

Key Responsibilities:

Leads the execution of complex responses to computer security incidents in alignment with organizational policies and industry best practices. Coordinates and communicates with multiple business units during incidents, providing updates and actionable recommendations. Oversees root cause analysis and ensures that lessons learned are integrated into improved processes and protections. Leads teams in assessing severity, developing mitigation strategies, and prioritizing risk reduction activities. Monitors security-related intelligence sources (e.g., SANS, BugTraq) to maintain situational awareness of current attacks and trends. Collaborates with Cybersecurity Engineering teams and business to communicate risks and recommend security enhancements. Ensures that security technologies employed by the operations and incident response teams support and enhance operational processes. Identifies opportunities to improve operational efficiency, standard operating procedures, and incident response playbooks. Leads the application of recognized cybersecurity and IT frameworks (e.g., NIST, ISO, ITIL, COBIT) in alignment with organizational processes and controls. Manages, coaches, and mentors cybersecurity operations staff, fostering a culture of learning, accountability, and continuous improvement. Defines team objectives, evaluates performance, and supports professional growth through training and development. Participates in industry task forces and working groups to stay informed on evolving threats and best practices, and fosters a culture of continuous improvement in cybersecurity practices and awareness. Contributes to organizational situational awareness by managing and leveraging cybersecurity data sources.Cummins is an equal opportunity employer. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, sex, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity, or other status protected by law.Competencies: Process Management and Optimization - Designs, refines, and automates IT operations processes to improve efficiency, consistency, service quality, security, and cost effectiveness across diverse environments.Service Quality and Reliability - Ensures IT services consistently meet performance, availability, and user satisfaction expectations by proactively maintaining service integrity, minimizing disruptions, and driving continuous improvement through collaboration, cost-effective practices, and operational excellence.Risk Management - Proactively identifies, assesses, and mitigates risks to IT services, data, and operations by applying structured controls and communication strategies to strengthen resilience, ensure compliance, and reduce business impact through structured controls, cost-aware decision-making, and communication strategies.Incident and Problem Management - Responds to disruptions and recurring issues by restoring service quickly, identifying root causes, and applying structured methods to reduce risk, improve reliability, and prevent recurrence.Standardization and Documentation - Creates and maintains clear, accessible documentation and standardized procedures to ensure consistent practices, traceability, and knowledge sharing across IT environments. Technical Passion and Drive - Models curiosity and excitement for technology by self-initiating continuous development, experimenting with emerging technologies, and identifying insertion opportunities that accelerate business performance.Security and Compliance - Applies standards, tools, and best practices to embed security, privacy, and compliance into the design/build/test/operate lifecycle for products, services, apps, systems, software, and configurations-balancing protection, efficiency, and cost.Driving Effective Outcomes - Takes ownership, acts with urgency, and initiates action to turn goals into clear plans, decisions, guardrails, and cadences while navigating ambiguity and change to drive momentum and deliver consistent results.Engaging with Impact - Communicates with clarity and purpose to align stakeholders, foster collaboration, build trust, and influence coordinated action across teams and functions to accelerate outcomes.Values Differences - Recognizing the value that different perspectives and cultures bring to an organization.Ensuring Customer Success - Embraces a customer-first mindset to deliver outcomes by linking customer needs and business priorities to aligned solutions, delivery, adoption, satisfaction, and realized value through sustained engagement that builds partnership and trust.Managing People and Teams - Builds inclusive teams that empower ownership, deepen capabilities, and ensure fair, timely performance accountability, creating an environment where people can deliver their best work and top performance.Directs Work - Creates conditions for team success with clear goals, priorities, work plans, standards, effective processes, resourcing, and governance to enable fast, empowered, accountable, and quality execution.Education, Licenses, Certifications: College, university, or equivalent degree in Computer Science, Information Technology, Engineering, or related subject, or relevant equivalent experience required. Global Information Assurance Certification (GIAC) Security Essentials Certification, GIAC Security Leadership Certification, Information Systems Audit and Control Association (ISACA) Certified Information Security Manager, Microsoft Certified Systems Engineer: Security, or Certified Information Systems Security Professional (CISSP) certification preferred. This position may require licensing for compliance with export controls or sanctions regulations.Experience: Understanding of the capabilities and configuration of industrial cybersecurity controls and solutions across multiple facets; for example: asset management, vulnerability management, anomaly detection, identity and access management, network security, endpoint security, application security, IDS/IPS, deep packet inspection, SIEM, data analytics, security and/or risk management and product development.Demonstrated ability to lead teams, manage budgets, and build organizational capability.Excellent communication and stakeholder management skills, with the ability to influence policy and advocate for cybersecurity best practices.Proven experience in cybersecurity management or equivalent leadership role.

Key Responsibilities

Asset Intelligence Strategy

* Define and maintain the enterprise Asset Intelligence strategy and roadmap.
* Establish asset intelligence capabilities that support cybersecurity, privacy, resilience, and compliance objectives.
* Align asset intelligence initiatives with business priorities and enterprise risk management.

Asset Visibility & Intelligence

* Develop a comprehensive view of enterprise technology assets across IT, Cloud, OT, Product, and third-party environments.
* Correlate asset information from multiple authoritative data sources.
* Improve visibility into unmanaged, unknown, or high-risk assets.
* Establish methods to identify critical business assets and supporting technologies.

Data Governance & Quality

* Define standards for asset data quality, ownership, lifecycle, and governance.
* Monitor completeness, accuracy, and consistency of enterprise asset information.
* Drive remediation of data quality issues with system owners.
* Establish KPIs and metrics for asset intelligence maturity.

Cyber Risk Integration

* Integrate asset intelligence with vulnerability management, CTEM, threat intelligence, identity, and risk management processes.
* Enable prioritization of cyber risk based on business criticality and exposure.
* Support executive risk reporting through trusted asset intelligence.

Executive Reporting & Analytics

* Develop dashboards and executive reporting on enterprise asset health.
* Identify trends, gaps, and emerging risks through asset analytics.
* Provide insights that improve investment decisions and cyber resilience.

Cross-Functional Leadership

* Partner with IT Operations, Infrastructure, Cloud, Enterprise Architecture, Product Security, Privacy, Risk Management, and business stakeholders.
* Serve as the enterprise expert for asset intelligence and governance.
* Influence enterprise standards without direct authority.

Continuous Improvement

* Evaluate emerging technologies that improve asset discovery and intelligence.
* Drive automation of asset correlation and reporting.
* Continuously mature enterprise asset intelligence capabilities.

Preferred Qualifications

* Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field.
* 8+ years of experience in cybersecurity, IT asset management, CMDB, configuration management, enterprise architecture, or security operations.
* Experience with asset discovery technologies, CMDBs, cloud inventories, EDR platforms, and vulnerability management solutions.
* Strong understanding of enterprise data governance and analytics.
* Experience translating technical information into executive-level reporting.
* Strong collaboration and influencing skills across multiple business functions.

To be successful in this role you will need the following:

• Process Management and Optimization - Designs, refines, and automates IT operations processes to improve efficiency, consistency, service quality, security, and cost effectiveness across diverse environments. 
• Service Quality and Reliability - Ensures IT services consistently meet performance, availability, and user satisfaction expectations by proactively maintaining service integrity, minimizing disruptions, and driving continuous improvement through collaboration, cost-effective practices, and operational excellence. 
• Risk Management - Proactively identifies, assesses, and mitigates risks to IT services, data, and operations by applying structured controls and communication strategies to strengthen resilience, ensure compliance, and reduce business impact through structured controls, cost-aware decision-making, and communication strategies. 
• Incident and Problem Management - Responds to disruptions and recurring issues by restoring service quickly, identifying root causes, and applying structured methods to reduce risk, improve reliability, and prevent recurrence. 
• Standardization and Documentation - Creates and maintains clear, accessible documentation and standardized procedures to ensure consistent practices, traceability, and knowledge sharing across IT environments. 
• Technical Passion and Drive - Models curiosity and excitement for technology by self-initiating continuous development, experimenting with emerging technologies, and identifying insertion opportunities that accelerate business performance. 
• Security and Compliance - Applies standards, tools, and best practices to embed security, privacy, and compliance into the design/build/test/operate lifecycle for products, services, apps, systems, software, and configurations-balancing protection, efficiency, and cost. 
• Driving Effective Outcomes - Takes ownership, acts with urgency, and initiates action to turn goals into clear plans, decisions, guardrails, and cadences while navigating ambiguity and change to drive momentum and deliver consistent results. 
• Engaging with Impact - Communicates with clarity and purpose to align stakeholders, foster collaboration, build trust, and influence coordinated action across teams and functions to accelerate outcomes. 
• Values Differences - Recognizing the value that different perspectives and cultures bring to an organization. 
• Ensuring Customer Success - Embraces a customer-first mindset to deliver outcomes by linking customer needs and business priorities to aligned solutions, delivery, adoption, satisfaction, and realized value through sustained engagement that builds partnership and trust. 
• Managing People and Teams - Builds inclusive teams that empower ownership, deepen capabilities, and ensure fair, timely performance accountability, creating an environment where people can deliver their best work and top performance. 
• Directs Work - Creates conditions for team success with clear goals, priorities, work plans, standards, effective processes, resourcing, and governance to enable fast, empowered, accountable, and quality execution. 

Education, Licenses, Certifications: 

• College, university, or equivalent degree in Computer Science, Information Technology, Engineering, or related subject, or relevant equivalent experience required. 
• Global Information Assurance Certification (GIAC) Security Essentials Certification, GIAC Security Leadership Certification, Information Systems Audit and Control Association (ISACA) Certified Information Security Manager, Microsoft Certified Systems Engineer: Security, or Certified Information Systems Security Professional (CISSP) certification preferred. 
• This position may require licensing for compliance with export controls or sanctions regulations. 

Experience: 

• Understanding of the capabilities and configuration of industrial cybersecurity controls and solutions across multiple facets; for example: asset management, vulnerability management, anomaly detection, identity and access management, network security, endpoint security, application security, IDS/IPS, deep packet inspection, SIEM, data analy...