Cybersecurity Architect

Alstom; City of Melbourne; On-site; AUD 170,000 - 230,000; Full time

Benefits offered by this job

Up to 3 additional leave days per year

18 weeks paid parental leave

Volunteering leave

Diversity & Inclusion networks

Novated leasing scheme

Wellbeing support

Job summary

Alstom is seeking an experienced Cybersecurity Architect with OT systems expertise for a major rail project in Victoria. You will lead design, implementation and maintenance of secure architectures, working across cross-functional teams and governance frameworks.

The role emphasizes ISA/IEC 62443 alignment, risk assessment, and vulnerability management. You’ll collaborate with stakeholders, including identity and access management and network security teams, to ensure resilience and safety of

Qualifications

• 8+ years’ experience in IT/OT cybersecurity architecture, implementation, and risk management, with focus on security, performance, reliability, and operational availability.
• Hands-on experience implementing cybersecurity controls in metro rail, rail transport, or similar critical infrastructure OT environments.
• Strong understanding of OT environments, systems, network technologies, and cyber-physical constraints affecting safety, physical assets, and service continuity.
• Demonstrated expertise in secure architecture design, defence-in-depth, segmentation, and ISA/IEC 62443 application.

Responsibilities

• Lead security analysis and define cybersecurity requirements and architecture for solutions.
• Design and maintain resilient, threat-resistant security architectures.
• Conduct risk assessments, implement security controls, and evaluate solutions.
• Manage cybersecurity aspects of third-party vendors and oversee vulnerability management.
• Provide technical guidance to project teams and support design reviews.
• Act as the cybersecurity SME for stakeholders, ensuring alignment with governance policies.
• Respond to security incidents and deliver post-incident analysis.
• Monitor emerging cyber threats, trends, and technologies.

Skills

OT cybersecurity

Security architecture

Risk assessment

Vulnerability management

Stakeholder engagement

Education

Bachelor's degree in Engineering/CS or related field

Tools

ISA/IEC 62443

Firewalls

IDS/IPS

EDR

Remote access security

Job description

Req ID:529308

At Alstom, we build what millions depend on daily - rail transportation systems that can’t afford to fail. We’re more than 85 000 people worldwide creating the industry most diverse portfolio: high-speed trains, metros, trams, maintenance services and integrated systems.

More than a job: a mission

Your future role

We are seeking an experienced Cybersecurity Architect with OT systems expertise in critical infrastructure to lead the design, implementation, and maintenance of secure architectures for a major rail project in Victoria. This role requires strong expertise in cybersecurity standards, architecture governance, and collaboration across cross-functional teams, including identity and access management and network communications production.

Your role, your impact

• Lead security analysis and define cybersecurity requirements and architecture for solutions
• Design and maintain resilient, threat-resistant security architectures
• Conduct risk assessments, implement security controls, and evaluate solutions
• Manage cybersecurity aspects of third-party vendors and oversee vulnerability management
• Provide technical guidance to project teams and support design reviews
• Act as the cybersecurity SME for stakeholders, ensuring alignment with governance policies
• Respond to security incidents and deliver post-incident analysis
• Monitor emerging cyber threats, trends, and technologies.

You’ll work with sharp, committed teams across Altom — solving complex challenges that shape the future of mobility.

What You Bring

• A degree in Engineering, Cybersecurity, Computer Science or a related field, or equivalent experience.
• 8+ years’ experience in IT/OT cybersecurity architecture, implementation, and risk management, with a focus on security, performance, reliability, and operational availability.
• Hands‑on experience implementing cybersecurity controls in metro rail, rail transport, or similar critical infrastructure OT environments.
• Strong understanding of OT environments, systems, network technologies, and cyber‑physical constraints affecting safety, physical assets, and service continuity.
• Demonstrated expertise in secure architecture design, defence‑in‑depth, segmentation, and ISA/IEC 62443 application, including zone and conduit modelling, security level considerations, requirements mapping, and compliance evidence.
• Experience conducting OT cybersecurity and cyber‑physical risk assessments, including risk treatment, residual risk documentation, and alignment with recognised standards such as ISA/IEC 62443, ISO 2700X, and NIST.
• Practical experience designing, deploying, or validating OT cybersecurity controls such as firewalls, IDS/IPS, EDR, secure remote access, jump servers, virtualisation security, proxy connections, cloud connectivity, data lake integration, and AD/RADIUS authentication.
• Knowledge of recognised techniques for evaluating system security, including vulnerability assessment and intrusion testing techniques.
• Ability to produce and maintain project cybersecurity artefacts, including security architecture, threat and risk assessments, zone and conduit models, firewall matrices, security requirements, test procedures, and assurance evidence.
• Experience assessing supplier technical solutions, designs, and cybersecurity evidence against project requirements, OT security standards, risk outcomes, and implementation feasibility.
• Strong communication and stakeholder engagement skills, with the ability to work effectively in fast‑paced, complex environments.

Alstom, a great place to grow

Perks & Benefits

• A diverse role, supporting a major rail project.
• Up to 3 additional leave days per year.
• 18 weeks paid parental leave.
• Volunteering leave.
• Diversity & Inclusion employee network groups.
• Purchased annual leave and a novated leasing scheme.
• Independent and confidential wellbeing support for you and your family.
• Our investment in your development, through award‑winning learning.
• Stability, challenges and a long‑term career enabling you to steer your progression in whatever direction you choose.

Here, progress isn’t always easy — the scale is massive, the tasks are complex — but the impact is real. Because when the system runs, the train moves, and the city connects — that feeling stays with you. And the legacy lasts.

You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you!

Important to note

As a global business, we’re an equal‑opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.

An agile, inclusive and responsible culture is the foundation of our company where diverse people are offered excellent opportunities to grow, learn and advance in their careers. We are committed to encouraging our employees to reach their full potential, while valuing and respecting them as individuals. We are an equal opportunity employer and strongly encourage women, Aboriginal and Torres Strait Islander, people with disability and other minority groups to apply.

We recognise that embracing flexibility & inclusivity is the smarter way of working. Please speak with us about your individual needs or if any workplace adjustments are required. If you require any adjustments to the recruitment process please email: [e-mail].

For internal applicants, please ensure you confirm your eligibility to apply with your Supervisor and relevant Human Resources representative prior to submitting an application.

As part of the application process, you will be required to undergo pre‑employment reference and medical checks, including drug and alcohol testing.