At Oshkosh, we build, serve and protect people and communities around the world by designing and manufacturing some of the toughest specialty trucks and access equipment. We employ over 18,000 team members all united by a common purpose. Our engineering and product innovation help keep soldiers and firefighters safe, is critical in building and keeping communities clean and helps people do their jobs every day.JOB SUMMARY: Oshkosh Corporation designs and builds mission-critical vehicles and technology for defense, municipal and commercial customers worldwide. Protecting the confidentiality, integrity and availability of our information assets is foundational to that mission. You will be part of our cybersecurity-compliance program—guiding teams to through CMMC, UK Cyber Essentials, PCI DSS and other regulatory certifications—and serve as the expert who turns requirements into pragmatic, risk-based controls.<div>WORK LOCATION </div><div>This position follows Oshkosh Corporation’s hybrid work model, with three days in-office and two days remote each week. </div><div>The preferred location for this role is at our Global Headquarters in Oshkosh, WI, with relocation assistance available for candidates who are not local. </div><div>However, we are also open to candidates based out of the following U.S. office locations: <ul><li>McConnellsburg, PA </li><li>Hagerstown, MD</li><li>Orlando, FL </li></ul></div>ESSENTIAL DUTIES AND RESPONSIBILITIES:  These duties are not meant to be all-inclusive, and other duties may be assigned.<ul><li>Participate in or lead Cybersecurity compliance efforts across the organization, including preparation for, scheduling, and leading assessments (e.g. CMMC).</li><li>Translate Cybersecurity control requirements into system level configurations and interpret system security capabilities for compliance requirements.</li><li>Prepare reports detailing policy, standard, process, and control gaps related to compliance requirements and provide remediation recommendations.</li><li>Work with management as the subject matter expert to develop program budgets and associated projects. Coordinate with IT and business regional leads to develop or modify compliance plans and strategies for different cultures, nationalities, and languages.</li><li>Experience leading or conducting IT audits including the ability to distill technical data down to stakeholder understanding in non-technical means. Keep informed on the latest research, trends, and developments in all regulatory compliance areas.</li><li>Serve as a trusted advisor to business functional areas (e.g., Finance, HR, Engineering) and/or internal IT resources (such as infrastructure, apps, IT services.).</li><li>Ensure that business and technical requirements are aligned to policy and are implemented within regulatory and contractual compliance. Maintain expert awareness of all aspects of information security and compliance, including PCI, and SOC requirements for information systems and industry best practices, such as, NIST 800-53, 800-171, 172.</li><li>Contribute to the development and maintenance of the Cybersecurity strategy.</li></ul>MINIMUM QUALIFICATIONS:   <ul><li>Bachelor’s degree in Cybersecurity, Information Systems, Communications, Computer Science or equivalent.</li><li>Six (6) or more years of experience in cybersecurity including direct involvement with regulatory or framework compliance (CMMC, NIST 800-171, PCI, ISO 27001, SOC2, FAR, DFARS, etc.)</li></ul>                                                                                                                                        PREFERRED QUALIFICATIONS: <ul><li>Graduate degree in Cybersecurity, Information Systems, Management or equivalent.</li><li>Relevant industry recognized certifications (CISSP, CEH, GIAC, Security+, SSAP, etc.)</li><li>In-depth Knowledge and experience with regulatory compliance models (NIST, HIPAA, PCI, ISO, etc.).</li><li>Hands-on design or operations background in at least one DT domain (infrastructure, cloud, or application development).</li><li>Demonstrated knowledge of security controls for network, applications, and operating systems.</li><li>Demonstrated conceptual, analytical, and innovative problem-solving and evaluative skills.</li><li>Experience communicating conceptual and technical information both verbally (on phone, one-on-one, to groups) and in writing (emails, letters, reports, presentations) to various audiences (work group, team, company management, external clients).</li><li>Experience with projects or issues of high complexity that require in-depth knowledge across multiple technical areas and lines of business.</li><li>Experience conducting or leading IT audits.</li><li>Hold an active or can obtain a U.S. Government Secret level or above clearance.</li><li>Experience drafting information security policies, procedures, and standards.</li><li>Experience testing effectiveness and adherence of cybersecurity controls.</li><li>Translate complex contractual and regulatory requirements into actionable information system configurations.</li><li>Experience collaborating in cross-functional work environments.</li></ul><div></div>BASIC COMPETENCIES:<ul><li>Internal Contacts: Contact with employees or others primarily at a routine level involving basic information exchange; Contact with peers and others involving explanation of information (these contacts may be within or outside department or division), and the gathering of factual information; may include the communication of sensitive or confidential information;  Contact across departments or divisions with employees involving persuasion of others, absent formal authority, to conform to a policy interpretation or recommend course of action.</li><li>External Contacts: External contact involving a requirement to maintain a continuing external working relationship with individuals, or organizations.</li><li>Communication Skills: Read, write, and comprehend simple instructions, short correspondence and memos; Read and interpret safety rules, operating/maintenance instructions and procedure manuals; Write routine reports, correspondence and speak effectively before both internal and external groups; Read, analyze and interpret business manuals, technical procedures and/or government regulations.</li><li>Decision-Making: Regularly makes decisions of responsibility, involving evaluation or information. Decisions may require development or application of alternatives or precedents.</li><li>Complexity, Judgment and Problem Solving: Typically difficult or complex work. Generally governed by broad instructions and objectives usually involving frequently changing conditions and problems.</li><li>Supervisory/Managerial: General instructing, scheduling, and reviewing the work of others performing the same or directly related work. Acts as “lead worker”. Job functional supervision only.</li></ul>WORKING CONDITIONS: <ul><li>Physical Demands: Frequent Sitting, Hearing, Talking, Visual, Typing, Manual Dexterity. Seldom Standing, Walking/Running, Reaching, Driving, Bending/Kneeling, Fine Dexterity, Upper Extremity Repetitive Motion, Lifting/Carrying 40lbs., Pushing/Pulling 40lbs.</li><li>Non-Physical Demands: Frequent Analysis/Reasoning, Communication/Interpretation, Math/Mental Computation, Reading, Sustained Mental Activity (i.e. auditing, problem solving, grant writing, composing reports), Writing.</li><li>Environmental Demands: Occasional Work Alone. Seldom Frequent Task Changes, Tedious/Exacting Work. </li><li>Work Schedule: Routine shift hours. Infrequent overtime, weekend, or shift rotation.</li><li>Demands/Deadlines: Occasional stress due to deadlines or workload because of intermittent or cyclical work pressures, or occasional exposure to distressed individuals within the immediate work environment.</li></ul>#LI-VRPay Range: $115,600.00 - $196,400.00<div><div><div><div><div><div><div>The above pay range reflects the minimum and maximum target pay for the position across all U.S. locations. Within this range, individual pay is determined by various factors, including the scope and responsibilities of the role, the candidate's experience, education and skills, as well as the equity of pay among team members in similar positions. Beyond offering a competitive total rewards package, we prioritize a people-first culture and offer various opportunities to support team member growth and success.</div></div></div></div></div></div></div>Oshkosh is committed to working with and offering reasonable accommodation to job applicants with disabilities. If you need assistance or an accommodation due to disability for any part of the employment process, please contact us at corporatetalentacquisition@oshkoshcorp.com.Oshkosh Corporation is a merit-based Equal Opportunity Employer. Job opportunities are open for application to all qualified individuals and selection decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or other protected characteristic. To the extent that information is provided or collected regarding categories as provided by law it will in no way affect the decision regarding an employment application.Oshkosh Corporation will not discharge or in any manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with Oshkosh Corporation's legal duty to furnish information.Certain positions with Oshkosh Corporation require access to controlled goods and technologies subject to the International Traffic in Arms Regulations or the Export Administration Regulations. Applicants for these positions may need to be "U.S. Persons," as defined in these regulations. Generally, a "U.S. Person" is a U.S. citizen, lawful permanent resident, or an individual who has been admitted as a refugee or granted asylum.

Moving the world forward Oshkosh is an industrial technology company of approximately 17,000 team members, that designs and manufactures some of the world&rsquo;s toughest specialty and access equipment under the brands of JLG&reg;, Hinowa, Pierce&reg;, Power Towers, MAXIMETAL, Oshkosh&reg; Defense, McNeilus&reg;, IMT&reg;, Jerr-Dan&reg;, Frontline&trade; Communications, Oshkosh&reg; Airport Products, Oshkosh&reg; AeroTech and Pratt Miller. We make a difference in people&rsquo;s lives by creating mission-critical equipment that serves the everyday hero. Our innovation is people focused and developed by sharing advances across our portfolio of companies. For us, it&rsquo;s about moving the world forward through building, serving and protecting communities. Our purpose: Make a difference in people&rsquo;s lives.

Lead Cybersecurity Engineer - Compliance

At Oshkosh, we build, serve and protect people and communities around the world by designing and manufacturing some of the toughest specialty trucks and access equipment. We employ over 18,000 team members all united by a common purpose. Our engineering and product innovation help keep soldiers and firefighters safe, is critical in building and keeping communities clean and helps people do their jobs every day.JOB SUMMARY: Oshkosh Corporation designs and builds mission-critical vehicles and technology for defense, municipal and commercial customers worldwide. Protecting the confidentiality, integrity and availability of our information assets is foundational to that mission. You will be part of our cybersecurity-compliance program—guiding teams to through CMMC, UK Cyber Essentials, PCI DSS and other regulatory certifications—and serve as the expert who turns requirements into pragmatic, risk-based controls.<div>WORK LOCATION&nbsp;</div><div>This position follows Oshkosh Corporation’s&nbsp;hybrid work model, with&nbsp;three days in-office&nbsp;and&nbsp;two days remote&nbsp;each week.&nbsp;</div><div>The&nbsp;preferred location&nbsp;for this role is at our&nbsp;Global Headquarters in Oshkosh, WI,&nbsp;with relocation assistance available for candidates who are not local.&nbsp;</div><div>However, we are also open to candidates based out of the following U.S. office locations:&nbsp;<ul><li>McConnellsburg, PA&nbsp;</li><li>Hagerstown, MD</li><li>Orlando, FL&nbsp;</li></ul></div>ESSENTIAL DUTIES AND RESPONSIBILITIES: &nbsp;These duties are not meant to be all-inclusive, and other duties may be assigned.<ul><li>Participate in or lead Cybersecurity compliance efforts across the organization, including preparation for, scheduling, and leading assessments (e.g. CMMC).</li><li>Translate Cybersecurity control requirements into system level configurations and interpret system security capabilities for compliance requirements.</li><li>Prepare reports detailing policy, standard, process, and control gaps related to compliance requirements and provide remediation recommendations.</li><li>Work with management as the subject matter expert to develop program budgets and associated projects. Coordinate with IT and business regional leads to develop or modify compliance plans and strategies for different cultures, nationalities, and languages.</li><li>Experience leading or conducting IT audits including the ability to distill technical data down to stakeholder understanding in non-technical means. Keep informed on the latest research, trends, and developments in all regulatory compliance areas.</li><li>Serve as a trusted advisor to business functional areas (e.g., Finance, HR, Engineering) and/or internal IT resources (such as infrastructure, apps, IT services.).</li><li>Ensure that business and technical requirements are aligned to policy and are implemented within regulatory and contractual compliance. Maintain expert awareness of all aspects of information security and compliance, including PCI, and SOC requirements for information systems and industry best practices, such as, NIST 800-53, 800-171, 172.</li><li>Contribute to the development and maintenance of the Cybersecurity strategy.</li></ul>MINIMUM QUALIFICATIONS:&nbsp; &nbsp;<ul><li>Bachelor’s degree in Cybersecurity, Information Systems, Communications, Computer Science or equivalent.</li><li>Six (6) or more years of experience in cybersecurity including direct involvement with regulatory or framework compliance (CMMC, NIST 800-171, PCI, ISO 27001, SOC2, FAR, DFARS, etc.)</li></ul>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;PREFERRED QUALIFICATIONS:&nbsp;<ul><li>Graduate degree in Cybersecurity, Information Systems, Management or equivalent.</li><li>Relevant industry recognized certifications (CISSP, CEH, GIAC, Security+, SSAP, etc.)</li><li>In-depth Knowledge and experience with regulatory compliance models (NIST, HIPAA, PCI, ISO, etc.).</li><li>Hands-on design or operations background in at least one DT domain (infrastructure, cloud, or application development).</li><li>Demonstrated knowledge of security controls for network, applications, and operating systems.</li><li>Demonstrated conceptual, analytical, and innovative problem-solving and evaluative skills.</li><li>Experience communicating conceptual and technical information both verbally (on phone, one-on-one, to groups) and in writing (emails, letters, reports, presentations) to various audiences (work group, team, company management, external clients).</li><li>Experience with projects or issues of high complexity that require in-depth knowledge across multiple technical areas and lines of business.</li><li>Experience conducting or leading IT audits.</li><li>Hold an active or can obtain a U.S. Government Secret level or above clearance.</li><li>Experience drafting information security policies, procedures, and standards.</li><li>Experience testing effectiveness and adherence of cybersecurity controls.</li><li>Translate complex contractual and regulatory requirements into actionable information system configurations.</li><li>Experience collaborating in cross-functional work environments.</li></ul><div></div>BASIC COMPETENCIES:<ul><li>Internal Contacts: Contact with employees or others primarily at a routine level involving basic information exchange; Contact with peers and others involving explanation of information (these contacts may be within or outside department or division), and the gathering of factual information; may include the communication of sensitive or confidential information; &nbsp;Contact across departments or divisions with employees involving persuasion of others, absent formal authority, to conform to a policy interpretation or recommend course of action.</li><li>External Contacts: External contact involving a requirement to maintain a continuing external working relationship with individuals, or organizations.</li><li>Communication Skills: Read, write, and comprehend simple instructions, short correspondence and memos; Read and interpret safety rules, operating/maintenance instructions and procedure manuals; Write routine reports, correspondence and speak effectively before both internal and external groups; Read, analyze and interpret business manuals, technical procedures and/or government regulations.</li><li>Decision-Making: Regularly makes decisions of responsibility, involving evaluation or information. Decisions may require development or application of alternatives or precedents.</li><li>Complexity, Judgment and Problem Solving: Typically difficult or complex work. Generally governed by broad instructions and objectives usually involving frequently changing conditions and problems.</li><li>Supervisory/Managerial: General instructing, scheduling, and reviewing the work of others performing the same or directly related work. Acts as “lead worker”. Job functional supervision only.</li></ul>WORKING CONDITIONS: <ul><li>Physical Demands: Frequent Sitting, Hearing, Talking, Visual, Typing, Manual Dexterity. Seldom Standing, Walking/Running, Reaching, Driving, Bending/Kneeling, Fine Dexterity, Upper Extremity Repetitive Motion, Lifting/Carrying 40lbs., Pushing/Pulling 40lbs.</li><li>Non-Physical Demands: Frequent Analysis/Reasoning, Communication/Interpretation, Math/Mental Computation, Reading, Sustained Mental Activity (i.e. auditing, problem solving, grant writing, composing reports), Writing.</li><li>Environmental Demands: Occasional Work Alone. Seldom Frequent Task Changes, Tedious/Exacting Work.&nbsp;</li><li>Work Schedule: Routine shift hours. Infrequent overtime, weekend, or shift rotation.</li><li>Demands/Deadlines: Occasional stress due to deadlines or workload because of intermittent or cyclical work pressures, or occasional exposure to distressed individuals within the immediate work environment.</li></ul>#LI-VRPay Range: $115,600.00 - $196,400.00<div><div><div><div><div><div><div>The above pay range reflects the minimum and maximum target pay for the position across all U.S. locations. Within this range, individual pay is determined by various factors, including the scope and responsibilities of the role, the candidate's experience, education and skills, as well as the equity of pay among team members in similar positions. Beyond offering a competitive total rewards package, we prioritize a people-first culture and offer various opportunities to support team member growth and success.</div></div></div></div></div></div></div>Oshkosh is committed to working with and offering reasonable accommodation to job applicants with disabilities. If you need assistance or an accommodation due to disability for any part of the employment process, please contact us at corporatetalentacquisition@oshkoshcorp.com.Oshkosh Corporation is a merit-based Equal Opportunity Employer.&nbsp;Job opportunities are open for application to all qualified individuals and selection decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or other protected characteristic. To the extent that information is provided or collected regarding categories as provided by law it will in no way affect the decision regarding an employment application.Oshkosh Corporation will not discharge or in any manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with Oshkosh Corporation's legal duty to furnish information.Certain positions with Oshkosh Corporation require access to controlled goods and technologies subject to the International Traffic in Arms Regulations or the Export Administration Regulations. Applicants for these positions may need to be "U.S. Persons," as defined in these regulations. Generally, a "U.S. Person" is a U.S. citizen, lawful permanent resident, or an individual who has been admitted as a refugee or granted asylum.

Lead Cybersecurity Engineer - Compliance

About the Job

About the Company

Oshkosh Corporation

Similar Jobs

Principal Cybersecurity Engineer

Principal Cybersecurity Engineer

Cybersecurity Certifications Specialist

Cybersecurity Certifications Specialist

Cybersecurity Analyst (Product Security Engineer)

Cybersecurity Analyst (Product Security Engineer)

Global IT Security Specialist

Global IT Security Specialist

Cloud Security Engineer

Cloud Security Engineer

Director, Cyber Security

Director, Cyber Security

Cybersecurity Engineer (Systems)

Cybersecurity Engineer (Systems)

Staff Program Manager, Information Security

Staff Program Manager, Information Security

Information Security Engineer

Information Security Engineer

Enterprise Security Architect

Enterprise Security Architect