Manager, Services

About the role

Ready to lead meaningful change in enterprise security? Bring your experience, ideas, and curiosity to help us build what comes next. Join Wabtec's Enterprise Information Security team and help secure the technologies, operations, and digital platforms that keep the world moving. You will collaborate with experts across infrastructure, cloud, applications, architecture, manufacturing and the business - bringing people together to solve high-value security challenges on a global scale.

Responsibilities

• Lead and shape Wabtec's enterprise vulnerability management program across on-premises, cloud, application, operational technology, and M&A environments.
• Define how cyber risk is identified, prioritized, remediated, validated and communicated across a global organization.
• Build smarter risk-based prioritization, create insights that inform executive decisions, and drive measurable improvements in resilience.
• Help teams move from finding vulnerabilities to reducing real-world exposure; contribute to forward‑looking work in cloud security, automation, exposure management, and responsible AI governance.
• Define, lead, and continuously mature the enterprise vulnerability management strategy across IT, OT, cloud, applications, and other enterprise technology environments.
• Establish governance, standards, procedures, service expectations, metrics, and reporting that provide a consistent view of enterprise cyber risk.
• Guide vulnerability identification, assessment, prioritization, remediation, validation, and exception management across global environments.
• Develop and improve risk‑based prioritization methods using threat intelligence, exploitability, business criticality, operational impact, and compensating controls.
• Partner with infrastructure, cloud, application, operations, manufacturing, architecture, and business teams to support timely, sustainable remediation.
• Set clear remediation objectives, monitor performance, identify barriers, and promote shared accountability for risk reduction.
• Provide concise, actionable reporting on risk posture, vulnerability trends, remediation performance, emerging threats, and program effectiveness.
• Oversee vulnerability assessment technologies, exposure management platforms, attack surface visibility, and continuous monitoring capabilities.
• Analyze trends and recurring weaknesses to recommend strategic improvements that reduce risk at scale.
• Collaborate with Security Operations and threat management teams to evaluate critical vulnerabilities, active threats, and newly disclosed security issues.
• Support cloud and application security initiatives by identifying vulnerabilities, misconfigurations, and exposure risks across multi‑cloud and software environments.
• Partner with the M&A project team to assess acquired environments, define integration requirements, and validate that inherited assets meet Wabtec security standards prior to final security signoff.
• Maintain practical standards, technical guidance, operational runbooks and documentation that help teams apply vulnerability management processes consistently.
• Support audits, compliance obligations, regulatory requirements, and customer requests by providing evidence, metrics and subject matter expertise.
• Lead or contribute to cybersecurity projects involving