Industrial Cybersecurity Manager

ALSTOM Gruppe; Toronto; On-site; CAD 110,000 - 165,000; Full time

Job summary

ALSTOM Gruppe in Toronto, ON, is seeking a full-time Industrial Cybersecurity Manager. You will shape cybersecurity frameworks for critical transportation systems, working with engineering, project management, and external auditors to manage risks and deliver secure solutions.

Key responsibilities include defining security architectures, risk analyses, and ensuring compliance with standards while collaborating across teams and with customers.

Qualifications

• Engineering background with architecture, design, and development experience.
• Experience in cybersecurity including deployment of security technologies.
• Hands-on project management experience in safety-critical environments.
• Knowledge of cybersecurity standards such as IEC-62443, ISO 2700X, NIST, or APTA.
• Familiarity with cybersecurity risk analysis methods for evaluating system security.
• Cybersecurity certification(s) such as CISSP, CISM, CEH, GICSP, or CompTIA Security+.

Responsibilities

• Analyze program security needs and define security objectives and risk strategy.
• Plan security activities within the software/development lifecycle and estimate costs/durations.
• Manage cybersecurity deliverables like risk analyses, architecture definitions, and operating procedures.
• Provide input during design meetings for cybersecurity activities.
• Collaborate with customers to agree on security measures and manage external audits.

Skills

Engineering background

Cybersecurity expertise

Project management

Safety-critical systems

Cybersecurity standards

Cybersecurity certifications

Embedded/OT experience

Railway/aeronautics experience

Job description

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Could you be the full-time hybrid Industrial Cybersecurity Manager in Toronto, ON, CA we’re looking for?

Your future role

Take on a new challenge and apply your cybersecurity and engineering expertise in a new cutting-edge field. You’ll work alongside innovative and collaborative teammates.

You'll play a key role in shaping the cybersecurity framework of critical transportation systems, ensuring safety and resilience in a rapidly evolving industry. Day-to-day, you’ll work closely with teams across the business (engineering, project management, and external auditors), manage cybersecurity risks and vulnerabilities, and much more.

You’ll specifically take care of analyzing program security needs and defining cybersecurity architectures, but also managing vulnerabilities and ensuring compliance with cybersecurity standards.

We’ll look to you for:

Analyzing program security needs, determining security objectives, and developing a risk strategy.

Planning security activities within the development lifecycle and estimating costs and durations.

Managing cybersecurity deliverables such as risk analyses, architecture definitions, and operating procedures.

Providing support during technical design meetings for cybersecurity activities.

Collaborating with customers to agree on security measures and managing external audits.

Promoting the Alstom Code of Ethics and adhering to the highest standards of ethical conduct.

All about you

We value passion and attitude over experience. That’s why we don’t expect you to have every single skill. Instead, we’ve listed some that we think will help you succeed and grow in this role:

Engineering background with experience in architecture, design, and development.

Experience related to cybersecurity, including deployment of security technologies.

Hands-on experience with project management and safety-critical systems.

Knowledge of cybersecurity standards such as IEC-62443, ISO 2700X, NIST, or APTA.

Familiarity with cybersecurity risk analysis methods and techniques for evaluating system security.

Certification in cybersecurity (e.g., CISSP, CISM, CEH, GICSP, or CompTIA Security+).

Experience in embedded or OT/industrial systems, preferably in railway or aeronautics industries.

Things you’ll enjoy

Join us on a life-long transformative journey – the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You’ll also:

Enjoy stability, challenges, and a long-term career free from boring daily routines.

Work with cutting-edge cybersecurity standards and technologies to secure critical transportation systems.

Collaborate with transverse teams and helpful colleagues.

Contribute to innovative projects.

Utilise our inclusive, innovative, and forward-thinking working environment.

Steer your career in whatever direction you choose across functions and countries.

Benefit from our investment in your development, through award-winning learning.

Progress towards leadership roles or other technical specializations.

Benefit from a fair and dynamic reward package that recognises your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension).

You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you!

Important to note

As a global business, we’re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.

Provider

Description

Enabled

SAP as service provider

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data centre
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor