Search for Risk Analyst roles focused on Vulnerability Management in Chicago, with 5+ years of experience required, in the Cyber Security industry, hybrid work mode, and a Bachelor's degree in a related field.

Okay, I've searched for Risk Analyst positions focused on Vulnerability Management in Chicago, requiring 5+ years of experience, within the Cyber Security industry, offering a hybrid work mode, and mandating a Bachelor's degree in a related field. I have found 45 positions for you.

Risk Analyst

Chicago, IL

5 years + Experience

Cyber Security

Hybrid

Can you help me to analyze the job description and company culture?

Sure. Here's the analysis:

Job Analysis:

The Risk Analyst - Vulnerability Management role at Wabtec Corporation is fundamentally focused on enhancing the organization's cybersecurity posture through a robust vulnerability management program. The core responsibilities include developing and implementing processes related to vulnerability assessment, risk assessment, and governance while fostering cross-functional collaboration among various departments. In this context, 'cross-functional coordination' means actively engaging with diverse teams, including IT, engineering, and executive leadership, to ensure that vulnerability management integrates seamlessly into everyday operations and aligns with the company's overall security strategy. Candidates must demonstrate both technical proficiency and exceptional communication skills—balancing the need to identify and mitigate risks with the ability to explain complex concepts effectively to non-technical stakeholders. Success in this role will involve proactively identifying potential security issues, creating and driving mandatory training initiatives to cultivate a security-conscious culture, and continuously assessing and improving processes to adapt to evolving cybersecurity challenges. Given the seniority of this role and its strategic importance, performance will likely be measured through defined KPIs related to program effectiveness and maturity, stakeholder satisfaction, and the organization's overall risk posture after 6–12 months.

Company Analysis:

Wabtec Corporation operates within the transportation sector, focusing on equipment and services for freight and transit rail while embracing digital solutions especially in the context of a rapidly evolving technological landscape. Positioned as a leader in this industry, Wabtec stands out due to its emphasis on innovation and sustainability in transportation solutions for future generations. Company culture is characterized by a commitment to continuous improvement, learning, and embracing diversity—these values are essential in a fast-paced environment where the integration of cybersecurity into daily operations is vital. This suggests that a candidate for the Risk Analyst position must be adaptable, collaborative, and forward-thinking to ensure alignment with the company's mission and contribute effectively to its strategic goals. Team context is crucial, as this role is part of the Enterprise Information Security (EIS) team, directly reporting to the Senior Manager, indicating significant visibility with the organization’s leadership and influence over policy-making related to cybersecurity. In summary, this role supports Wabtec’s larger objective of delivering resilient, innovative transportation solutions by safeguarding its IT infrastructure—positioning cybersecurity as a critical enabler of operational excellence and customer trust.

Mock up some interview questions based on the job description.

Absolutely. Here are some mock interview questions that could come up:

Tell me about a time when you had to balance technical knowledge with strong communication in order to drive a project forward.
Describe a situation where you successfully collaborated with cross-functional teams. What challenges did you face, and how did you overcome them?
Can you share an experience where you identified a critical vulnerability and how you managed the risk associated with it?
How do you prioritize vulnerabilities in your previous roles? Can you give an example of a scoring system you implemented?
How would you approach designing a comprehensive vulnerability management framework for our organization?
What tools or methodologies do you have experience with regarding vulnerability assessment? How did they help in past roles?
Explain how you would integrate training on vulnerability management into varying stakeholder processes.
Imagine you are faced with a significant vulnerability that has been escalated to you for immediate attention. How would you assess the risk and communicate with leadership?
Suppose a major vulnerability was identified after a significant incident. What steps would you take in the post-incident review to improve future processes?
Why are you interested in working at Wabtec specifically, and how do you think your values align with our company's mission?
What aspects of Wabtec's approach to diversity and inclusion resonate with you, and how do you envision contributing to that culture?
What excites you the most about the transportation solutions we offer, and how do you see your role in enhancing those solutions through your expertise?

Job Details

Overview Company

Risk Analyst - Vulnerability Management

Wabtec Corporation

11 days ago

Highlight

HybridFull-time5+ yearsSenior

Summary

Wabtec Corporation is seeking a Risk Analyst - Vulnerability Management to join their team in Chicago, IL. The role involves developing, implementing, and overseeing the vulnerability management program with a focus on risk assessment, governance, and cross-functional collaboration.

About the Role

As a Risk Analyst - Vulnerability Management, you will drive cybersecurity excellence by collaborating with various teams to advance information security capabilities. You will design and implement vulnerability assessment processes, establish governance structures, and drive risk-based decision-making. The role includes spearheading training initiatives, identifying and mitigating security risks, and contributing to the resilience of the organization's IT infrastructure.

About You

Required:

Bachelor’s degree in Business, Technology, Cyber Security, Technology Risk Management or related field or strong hands-on experience.
5+ years experience in information security, with a focus on Vulnerability Management and Risk Management.
Strong analytical and problem-solving skills.
Strong interpersonal skills.
Experience in stakeholder management and cross-functional collaboration.
Knowledge of industry Risk management frameworks, common mitigation practices, and Organizational control management.
Proficiency in process formulation and improvement.
Proven solid written and oral communication skills.

Preferred:

ISO 27001 standard knowledge is highly desirable.
Governance and Risk Certification a plus (CRISC, CISM, CISA, or CISSP).

Benefits

Hybrid work schedule (both on-site and remote).
Relocation assistance may be provided if eligibility requirements are met.
Annual bonus, if eligible.
Comprehensive benefits package including health, welfare, and retirement.

Wabtec Corporation

Transportation solutions that revolutionize the way the world moves for future generations.

Chicago, IL