Cybersecurity Awareness & Training Analyst

Cybersecurity Awareness & Training Analyst at Cummins Inc.

We are looking for a talented Cybersecurity Awareness & Training Analyst to join our team specializing in Systems/Information Technology for our Corporate organization in Indianapolis, IN.

In this role, you will make an impact in the following ways:

Impactful Contributions

• Strengthen Cummins’ security posture by building a solid understanding of internal cybersecurity policies and global data privacy principles.
• Support risk identification efforts by applying Cummins’ risk management frameworks to assess threats, severity levels, and mitigation priorities.
• Ensure alignment with industry standards by applying frameworks such as NIST, ISO, ITIL, and COBIT to Cummins‑specific processes and controls.
• Contribute to troubleshooting and solution validation by assisting in root‑cause analysis for technology and security-related problems.
• Improve incident handling by escalating issues promptly and providing clear, detailed information to enable faster resolution.
• Promote a culture of cybersecurity awareness by helping communicate best practices and reinforcing secure behaviors across the organization.
• Enhance solution delivery by collaborating with stakeholders to understand requirements for new or evolving technology needs.
• Help safeguard data and systems by supporting the evaluation of proposed technology changes through a cybersecurity and risk‑focused lens.

Key Responsibilities & Competencies

To be successful as a Cybersecurity Awareness & Training Analyst, you will need the following:

• Action oriented - Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.
• Builds networks - Effectively building formal and informal relationship networks inside and outside the organization.
• Collaborates - Building partnerships and working collaboratively with others to meet shared objectives.
• Communicates effectively - Developing and delivering multi-mode communications that convey a clear understanding of the unique needs of different audiences.
• Ensures accountability - Holding self and others accountable to meet commitments.
• Instills trust - Gaining the confidence and trust of others through honesty, integrity, and authenticity.
• Manages ambiguity - Operating effectively, even when things are not certain or the way forward is not clear.
• Manages conflict - Handling conflict situations effectively, with a minimum of noise.
• Self-development - Actively seeking new ways to grow and be challenged using both formal and informal development channels.
• Cybersecurity Risk Management - Identifies and assesses the potential impact of Cybersecurity risks against established Cybersecurity industry frameworks, regulations and organizational policies to develop and implement risk mitigation strategies in alignment with business objectives.
• Regulatory Risk Compliance Management - Evaluates the design and effectiveness of controls against established industry frameworks and regulations to assess adherence with legal/regulatory requirements.
• Values differences - Recognizing the value that different perspectives and cultures bring to an organization.

Required Qualifications

• Education: College, university, or equivalent degree in Cybersecurity, Computer Science, or Information Technology, or related subject, or relevant equivalent experience required. This position may require licensing for compliance with export controls or sanctions regulations.
• Experience: Minimal relevant work experience required (0-3 years of experience).

Preferred Qualifications

• Experience: Experience working in large or complex organizations, or with diverse teams; experience in working on a global scale, understanding social norms and language considerations in awareness and training materials; experience with behavioral change strategies or learning science; prior experience or knowledge of the KnowBe4 platform is desired.
• Skills: Strong project management and organizational skills; ability to work independently and in a team environment; ability to perform targeted phishing exercises such as spear phishing, etc.

Personal Attributes

• Adaptable & Proactive: Demonstrates the ability to adjust to changing threats and needs as well as high accountability to drive work forward without significant oversight.
• Detail-Oriented: Ability to develop and track the effectiveness of training programs.
• Collaborative: Strong team player who can work cross-functionally with different departments.
• Passionate: A genuine interest in cybersecurity, education, and risk management.

Working Conditions

Occasional travel may be required for in-person training or conferences.

Key Skills/Competency

• Cybersecurity Awareness
• Risk Management
• Data Privacy
• NIST Framework
• ISO 27001
• Incident Response
• Stakeholder Collaboration
• Behavioral Change Strategies
• KnowBe4 Platform
• Project Management