Cybersecurity Architect

ALSTOM Gruppe; City of Melbourne; On-site; AUD 180,000 - 260,000; Full time

Benefits offered by this job

Extra leave days

Parental leave

Volunteering leave

Wellbeing support

Learning program

Diversity groups

Novated leasing

Job summary

Alstom is seeking an experienced Cybersecurity Architect with OT systems expertise to lead the design, implementation, and maintenance of secure architectures for a major rail project in Victoria. The role demands ISA/IEC 62443 knowledge, risk assessment, and collaboration with identity, access management, and network teams.

You will guide security analyses, define requirements, and oversee threat protection across the project.

Qualifications

• Degree in Engineering, Cybersecurity, Computer Science or related field or equivalent experience.
• 8+ years’ experience in IT/OT cybersecurity architecture, implementation, and risk management.
• Hands-on experience implementing cybersecurity controls in metro rail or similar critical infrastructure OT environments.
• Strong understanding of OT environments, systems, network technologies, and cyber-physical constraints.
• Experience with ISA/IEC 62443, risk assessments, and security architectures.
• Knowledge of vulnerability assessment, intrusion testing techniques.

Responsibilities

• Lead security analysis and define cybersecurity requirements and architecture for solutions.
• Design and maintain resilient, threat-resistant security architectures.
• Conduct risk assessments, implement security controls, and evaluate solutions.
• Manage cybersecurity aspects of third-party vendors and oversee vulnerability management.
• Provide technical guidance to project teams and support design reviews.
• Act as cybersecurity SME for stakeholders, ensuring governance alignment.
• Respond to security incidents and deliver post-incident analysis.
• Monitor emerging cyber threats, trends, and technologies.

Job description

At Alstom, we build what millions depend on daily - rail transportation systems that can’t afford to fail. We’re more than 85 000 people worldwide creating the industry most diverse portfolio: high-speed trains, metros, trams, maintenance services and integrated systems.

More than a job: a mission

Your future role

We are seeking an experienced Cybersecurity Architect with OT systems expertise in critical infrastructure to lead the design, implementation, and maintenance of secure architectures for a major rail project in Victoria. This role requires strong expertise in cybersecurity standards, architecture governance, and collaboration across cross-functional teams, including identity and access management and network communications production.

Your role, your impact

• Lead security analysis and define cybersecurity requirements and architecture for solutions
• Design and maintain resilient, threat-resistant security architectures
• Conduct risk assessments, implement security controls, and evaluate solutions
• Manage cybersecurity aspects of third-party vendors and oversee vulnerability management
• Provide technical guidance to project teams and support design reviews
• Act as the cybersecurity SME for stakeholders, ensuring alignment with governance policies
• Respond to security incidents and deliver post-incident analysis
• Monitor emerging cyber threats, trends, and technologies.

You’ll work with sharp, committed teams across Altom — solving complex challenges that shape the future of mobility.

What you bring

• A degree in Engineering, Cybersecurity, Computer Science or a related field, or equivalent experience.
• 8+ years’ experience in IT/OT cybersecurity architecture, implementation, and risk management, with a focus on security, performance, reliability, and operational availability.
• Hands-on experience implementing cybersecurity controls in metro rail, rail transport, or similar critical infrastructure OT environments.
• Strong understanding of OT environments, systems, network technologies, and cyber-physical constraints affecting safety, physical assets, and service continuity.
• Demonstrated expertise in secure architecture design, defence‑in‑depth, segmentation, and ISA/IEC 62443 application, including zone and conduit modelling, security level considerations, requirements mapping, and compliance evidence.
• Experience conducting OT cybersecurity and cyber‑physical risk assessments, including risk treatment, residual risk documentation, and alignment with recognised standards such as ISA/IEC 62443, ISO 2700X, and NIST.
• Practical experience designing, deploying, or validating OT cybersecurity controls such as firewalls, IDS/IPS, EDR, secure remote access, jump servers, virtualisation security, proxy connections, cloud connectivity, data lake integration, and AD/RADIUS authentication.
• Knowledge of recognised techniques for evaluating system security, including vulnerability assessment and intrusion testing techniques.
• Ability to produce and maintain project cybersecurity artefacts, including security architecture, threat and risk assessments, zone and conduit models, firewall matrices, security requirements, test procedures, and assurance evidence.
• Experience assessing supplier technical solutions, designs, and cybersecurity evidence against project requirements, OT security standards, risk outcomes, and implementation feasibility.
• Strong communication and stakeholder engagement skills, with the ability to work effectively in fast‑paced, complex environments.

Alstom, a great place to grow

• A diverse role, supporting a major rail project.
• Up to 3 additional leave days per year.
• 18 weeks paid parental leave.
• Volunteering leave.
• Diversity & Inclusion employee network groups.
• Purchased annual leave and a novated leasing scheme.
• Independent and confidential wellbeing support for you and your family.
• Our investment in your development, through award‑winning learning.
• Stability, challenges and a long‑term career enabling you to steer your progression in whatever direction you choose.

Here, progress isn’t always easy — the scale is massive, the tasks are complex — but the impact is real. Because when the system runs, the train moves, and the city connects — that feeling stays with you. And the legacy lasts.

As a global business, we’re an equal‑opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.

An agile, inclusive and responsible culture is the foundation of our company where diverse people are offered excellent opportunities to grow, learn and advance in their careers. We are committed to encouraging our employees to reach their full potential, while valuing and respecting them as individuals. We are an equal opportunity employer and strongly encourage women, Aboriginal and Torres Strait Islander, people with disability and other minority groups to apply.

We recognise that embracing flexibility & inclusivity is the smarter way of working. Please speak with us about your individual needs or if any workplace adjustments are required. If you require any adjustments to the recruitment process please email: [e-mail].

As part of the application process, you will be required to undergo pre‑employment reference and medical checks, including drug and alcohol testing.