Industrial Cybersecurity Lead for Critical Infrastructure

Alstom; Toronto; Hybrid; CAD 110,000 - 165,000; Full time

Job summary

ALSTOM Gruppe in Toronto, ON, is seeking a full-time Industrial Cybersecurity Manager. You will shape cybersecurity frameworks for critical transportation systems, working with engineering, project management, and external auditors to manage risks and deliver secure solutions.

Key responsibilities include defining security architectures, risk analyses, and ensuring compliance with standards while collaborating across teams and with customers.

Qualifications

• Engineering background with architecture, design, and development experience.
• Experience in cybersecurity including deployment of security technologies.
• Hands-on project management experience in safety-critical environments.
• Knowledge of cybersecurity standards such as IEC-62443, ISO 2700X, NIST, or APTA.
• Familiarity with cybersecurity risk analysis methods for evaluating system security.
• Cybersecurity certification(s) such as CISSP, CISM, CEH, GICSP, or CompTIA Security+.

Responsibilities

• Analyze program security needs and define security objectives and risk strategy.
• Plan security activities within the software/development lifecycle and estimate costs/durations.
• Manage cybersecurity deliverables like risk analyses, architecture definitions, and operating procedures.
• Provide input during design meetings for cybersecurity activities.
• Collaborate with customers to agree on security measures and manage external audits.

Skills

Engineering background

Cybersecurity expertise

Project management

Safety-critical systems

Cybersecurity standards

Cybersecurity certifications

Embedded/OT experience

Railway/aeronautics experience

Job description

ALSTOM Gruppe in Toronto, ON, is seeking a full-time Industrial Cybersecurity Manager. You will shape cybersecurity frameworks for critical transportation systems, working with engineering, project management, and external auditors to manage risks and deliver secure solutions.

Key responsibilities include defining security architectures, risk analyses, and ensuring compliance with standards while collaborating across teams and with customers.