OT Cybersecurity Manager

ALSTOM Gruppe; Saint-Bruno; On-site; CAD 110,000 - 160,000; Full time

Job summary

Alstom is seeking a cybersecurity expert to join our global teams and safeguard critical rail systems. You'll define security architectures, assess risks, and support audits across development projects.

In this role, you’ll collaborate with engineers and project managers, manage third‑party risks, and ensure cybersecurity budgets are allocated effectively while driving initiatives that advance industrial security in a diverse, inclusive environment.

Qualifications

• Bachelor's Degree in Engineering.
• Cybersecurity certifications (preferred).
• 5+ years of experience related to cybersecurity, including deployment of security technologies.
• Experience working with industrial companies (OT and Industrial Control Cybersecurity).
• Experience in project management and working with engineering teams.
• Knowledge of industrial cybersecurity architecture and principles.
• Familiarity with ISO 2700X, NIST, NIS, and IEC 62443 standards and regulations.
• Understanding of risk analysis for industrial electronics or embedded systems.
• Knowledge of system and network architecture concepts, operating systems, and programming languages.

Responsibilities

• Plan security activities within the development life cycle, estimating costs and impacts.
• Conduct cybersecurity context and risk analysis.
• Define cybersecurity architecture and allocate requirements.
• Manage third‑party risks and cascading requirements to suppliers.
• Apply cybersecurity assurance levels.
• Provide support during technical design meetings for cybersecurity activities.
• Evaluate project cybersecurity levels and reporting status.
• Manage project budgets related to cybersecurity.
• Interface with subcontractors and external auditors.

Skills

Cybersecurity

OT/ICS security

Project management

Industrial architecture

Regulations (ISO/NIST/IEC62443)

Risk analysis

Systems & networks

Programming basics

Education

Bachelor's Degree in Engineering

Job description

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Your future role

Take on a new challenge and apply your cybersecurity expertise in a cutting‑edge field. You’ll work alongside innovative and collaborative teammates in a diverse and inclusive environment.

You’ll ensure project security needs are met by analyzing requirements, identifying risks, and defining key cybersecurity objectives. Day-to-day, you’ll work closely with global teams of engineers and project managers, support technical design meetings, manage third‑party risks, and oversee project cybersecurity budgets, and much more.

You’ll specifically take care of defining cybersecurity architecture and operating procedures, but also evaluating achieved cybersecurity levels and managing external audits.

• Planning security activities within the development life cycle, estimating costs and impacts, and identifying training needs
• Conducting cybersecurity context and risk analysis
• Defining cybersecurity architecture and allocating requirements
• Managing third‑party risks and cascading requirements to suppliers
• Applying cybersecurity assurance levels
• Providing support during technical design meetings for cybersecurity activities
• Evaluating project cybersecurity levels and reporting status
• Managing project budgets related to cybersecurity
• Interfacing with subcontractors and external auditors

All about you

• Bachelor's Degree in Engineering
• Cybersecurity certifications (preferred)
• 5+ years of experience related to cybersecurity, including deployment of security technologies
• Experience working with industrial companies (OT and Industrial Control Cybersecurity)
• Experience in project management and working with engineering teams
• Knowledge of industrial cybersecurity architecture and principles
• Familiarity with cybersecurity standards and regulations such as ISO 2700X, NIST, NIS, and IEC 62443
• Understanding of risk analysis for industrial electronics or embedded systems
• Knowledge of system and network architecture concepts, operating systems, and programming languages

Things you’ll enjoy

• Join us on a life‑long transformative journey – the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You’ll also:
• Enjoy stability, challenges, and a long‑term career free from boring daily routines
• Work with new security standards for rail signalling
• Collaborate with transverse teams and helpful colleagues
• Contribute to innovative projects
• Utilise our flexible and inclusive working environment
• Steer your career in whatever direction you choose across functions and countries
• Benefit from our investment in your development, through award‑winning learning
• Progress towards senior leadership or specialized technical roles
• Benefit from a fair and dynamic reward package that recognizes your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension)
• You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you!

Important to note

As a global business, we’re an equal‑opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data centre
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor