Head of Services - Support and Managed

Ready to lead meaningful change in enterprise security? Bring your experience, ideas, and curiosity to help us build what comes next. Join Wabtec's Enterprise Information Security team and help secure the technologies, operations, and digital platforms that keep the world moving. You will collaborate with experts across infrastructure, cloud, applications, architecture, manufacturing and the business - bringing people together to solve high-value security challenges on a global scale.As Enterprise Information Security Services Manager, you will take the lead in shaping Wabtec's enterprise vulnerability management program across on-premises, cloud, application, operational technology, and M&A environments. Reporting to the Enterprise Information Security Director, you will have the visibility, autonomy and influence to define how cyber risk is identified, prioritized, remediated, validated and communicated across a global organization.This is a high-visibility opportunity to build smarter risk-based prioritization, create insights that inform executive decisions, and drive measurable improvements in resilience. You will help teams move from finding vulnerabilities to reducing real-world exposure—and contribute to forward-looking work in cloud security, automation, exposure management, and responsible artificial intelligence governance.A bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. Experience leading or significantly contributing to enterprise vulnerability management, exposure management, or cyber risk management programs across multiple technology environments.Knowledge of vulnerability assessment technologies, remediation workflows, risk prioritization methods, and exposure management practices.Understanding of vulnerability scoring, threat intelligence, exploitability, business criticality, and risk-based remediation approaches.Strong understanding of artificial intelligence (AI), machine learning, and emerging AI technologies, with experience developing governance frameworks, risk management practices, and operational controls to support the secure, responsible and compliant adoption of AI across the enterprise.Experience developing meaningful metrics, reports, or dashboards that communicate cyber risk and remediation progress to technical and executive audiences.Experience extending vulnerability management and security controls into newly acquired environments, including asset discovery, scan enablement and remediation tracking through integration.Experience with public cloud platforms such as AWS or Azure and familiarity with cloud security risks, shared-responsibility models and cloud native application protection platforms.Working knowledge of enterprise operating systems, networking, system administration, applications, and infrastructure technologies.Strong communication, program execution, and stakeholder engagement skills, including the ability to explain complex risk in clear business terms.Experience organizing workstreams and maintaining operational transparency through IT service management or comparable workflow platforms.Ability to support occasional weekend or off-shift work during cybersecurity incidents, planned maintenance, or other business-critical events.Experience implementing exposure management, attack surface management, or Continuous Threat Exposure Management (CTEM) practices.Experience supporting cybersecurity programs in manufacturing, industrial, OT, or industrial control system (ICS) environments.Experience integrating vulnerability management with Security Operations, Incident Response, architecture, engineering, or governance functions.Experience establishing or contributing to enterprise AI governance programs, including the development of policies, standards, risk management processes, oversight mechanisms and cross-functional operating models that enable responsible AI adoption while aligning with business objectives and regulatory expectations.Knowledge of containers, Kubernetes, and cloud-native security technologies.Experience presenting cyber risk, remediation performance, or program strategy to senior leaders.Define, lead, and continuously mature the enterprise vulnerability management strategy across IT, OT, cloud, applications, and other enterprise technology environments.Establish governance, standards, procedures, service expectations, metrics, and reporting that provide a consistent view of enterprise cyber risk.Guide vulnerability identification, assessment, prioritization, remediation, validation, and exception management across global environments.Develop and improve risk-based prioritization methods using threat intelligence, exploitability, business criticality, operational impact, and compensating controls.Partner with infrastructure, cloud, application, operations, manufacturing, architecture, and business teams to support timely, sustainable remediation.Set clear remediation objectives, monitor performance, identify barriers, and promote shared accountability for risk reduction.Provide concise, actionable reporting on risk posture, vulnerability trends, remediation performance, emerging threats, and program effectiveness.Oversee vulnerability assessment technologies, exposure management platforms, attack surface visibility, and continuous monitoring capabilities.Analyze trends and recurring weaknesses to recommend strategic improvements that reduce risk at scale.Collaborate with Security Operations and threat management teams to evaluate critical vulnerabilities, active threats, and newly disclosed security issues.Support cloud and application security initiatives by identifying vulnerabilities, misconfigurations, and exposure risks across multi-cloud and software environments.Partner with the M&A project team to assess acquired environments, define integration requirements, and validate that inherited assets meet Wabtec security standards prior to final security signoff.Maintain practical standards, technical guidance, operational runbooks and documentation that help teams apply vulnerability management processes consistently.Support audits, compliance obligations, regulatory requirements, and customer requests by providing evidence, metrics and subject matter expertise.Lead or contribute to cybersecurity projects involving process transformation, security tooling, data integration and enterprise risk reduction.Provide advanced guidance and escalation support for vulnerability management and related security technologies.Regularly remaining in a stationary position, often standing, or sitting for prolonged periodsRegularly communicating with others to exchange informationRegularly required to attend meetings in person and virtually using video and audio computer equipmentRegularly repeating motions that may include the wrists, hands, and/or fingers, such as typingOccasionally moving about to accomplish tasks or moving from one worksite to anotherOccasionally light work that includes moving objects up to twenty poundsYou may also be asked to perform other duties outside of your function or trade, for which adequate training will be provided if necessary.Hybrid work schedule (both on-site and remote)The employee will normally work in a temperature-controlled office environment, with frequent exposure to electronic office equipment. During visits to areas of operations, they may be exposed to extreme cold or hot weather conditions. Is occasionally exposed to fumes or airborne particles, toxic or caustic chemicals, and loud noise.Relocation assistance not currently provided.The salary rate for this role is currently $104800-149300 The actual salary offered to a candidate may be influenced by a variety of factors, such as: training, transferable skills, work experience, education, business needs, market demands and work location. More information on offered benefits, which include health, welfare, and retirement, are available at mywabtecbenefits.Other benefit offerings for this role may include annual bonus, if eligible.If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you.Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together - are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re building a culture where leadership, inclusion and your unique perspective fuel progress.

We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.