Chief Information Security Officer

Transdev North America, Inc.; Boston (MA); On-site; USD 160,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation package

Annual Short-Term Incentive (STI)

Job summary

Bay State Rail, a joint venture involving Transdev North America, seeks a Chief Information Security Officer (CISO) to lead cybersecurity, risk management, and regulatory compliance for the MBTA Regional Rail initiative. You will shape policy, direct incident response, and report to the CIO, aligning security with business goals.

You will drive security strategy across IT/OT, coordinate with partners and agencies, and foster a culture of awareness and excellence while navigating complex

Qualifications

• Minimum of five (5) years of professional experience in cybersecurity management and information security, including expertise in risk assessment, regulatory compliance, and incident response.
• Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent qualifications.
• Demonstrated experience managing cybersecurity programs in rail transit, transportation, critical infrastructure, or comparable mission-critical environments.
• Proven experience implementing cybersecurity frameworks and managing cybersecurity incident response, investigations, and regulatory reporting.
• Strong knowledge of cybersecurity principles, risk management, security controls, threat and vulnerability management, and IT/OT security.
• Excellent communication, leadership, analytical, and stakeholder management skills.

Responsibilities

• Lead and oversee the organization's cybersecurity program, ensuring the confidentiality, integrity, availability, and resilience of IT systems, operational technology (OT), and critical infrastructure.
• Develop, implement, and maintain cybersecurity policies, standards, frameworks, and controls, ensuring compliance with applicable regulatory requirements, contractual obligations, and industry best practices.
• Oversee cybersecurity risk assessments, threat and vulnerability management, and the implementation of appropriate security measures.
• Lead cybersecurity incident response, investigations, recovery activities, and regulatory reporting, ensuring timely and effective management of security incidents.
• Monitor the effectiveness of cybersecurity controls, identify emerging threats and risks, and recommend appropriate mitigation measures.
• Coordinate cybersecurity activities with the CIO, internal stakeholders, third-party service providers, host railroads, contractors, and relevant government agencies.
• Provide strategic cybersecurity advice to management and promote cybersecurity awareness, accountability, and continuous improvement across the organization.

Skills

Cybersecurity leadership

Information security

Regulatory compliance

Incident response

Risk assessment

Rail/transit security

Education

CISSP or CISM certification

Job description

Chief Information Security Officer (CISO)

Position Contingency Notice: This position is associated with Bay State Rail’s proposal to operate the MBTA Commuter Rail network. Employment opportunities for this role are contingent upon Bay State Rail being awarded the contract and successful contract mobilization.

About Bay State Rail

Bay State Rail is a joint venture between Transdev North America and Transport UK and is one of three teams pursuing the opportunity to operate the MBTA Regional Rail network. Our team brings the expertise and vision needed to transform Boston regional rail into a service built for the common good. We are committed to delivering a modern, dependable rail system that strengthens communities, eases congestion, and drives a more sustainable future.

Position Summary

The Chief Information Security Officer (CISO) is responsible for leading and overseeing all cybersecurity, information security, and cyber risk management activities supporting the Boston Regional Rail operation. Reporting to the executive leadership team, the CISO provides strategic direction for the protection of information technology systems, operational technology infrastructure, communication networks, and other critical rail assets. The CISO develops and maintains a comprehensive cybersecurity program that ensures regulatory compliance, manages cyber risk, directs incident response activities, and safeguards the confidentiality, integrity, availability, and resilience of systems that support safe, secure, and reliable commuter rail operations. The position serves as a trusted advisor to executive leadership on cybersecurity strategy, emerging threats, technology risk, and security investments while fostering a culture of cybersecurity awareness, accountability, and operational excellence throughout the organization.

We’re Proud To Offer

• Competitive compensation package of minimum $ 160,000 – maximum $ 190,000
• In addition to base salary, this role is eligible for an annual Short-Term Incentive (STI) opportunity

Position Profile / Key Responsibilities

• Lead and oversee the organization's cybersecurity program, ensuring the confidentiality, integrity, availability, and resilience of IT systems, operational technology (OT), and critical infrastructure.
• Develop, implement, and maintain cybersecurity policies, standards, frameworks, and controls, ensuring compliance with applicable regulatory requirements, contractual obligations, and industry best practices.
• Oversee cybersecurity risk assessments, threat and vulnerability management, and the implementation of appropriate security measures.
• Lead cybersecurity incident response, investigations, recovery activities, and regulatory reporting, ensuring timely and effective management of security incidents.
• Monitor the effectiveness of cybersecurity controls, identify emerging threats and risks, and recommend appropriate mitigation measures.
• Coordinate cybersecurity activities with the CIO, internal stakeholders, third-party service providers, host railroads, contractors, and relevant government agencies.
• Provide strategic cybersecurity advice to management and promote cybersecurity awareness, accountability, and continuous improvement across the organization.

Reporting Relationship: The Chief Information Security Officer shall report directly to the Chief Information Officer.

Qualifications And Experience

• Minimum of five (5) years of professional experience in cybersecurity management and information security, including expertise in risk assessment, regulatory compliance, and incident response.
• Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent qualifications.
• Demonstrated experience managing cybersecurity programs in rail transit, transportation, critical infrastructure, or comparable mission-critical environments.
• Proven experience implementing cybersecurity frameworks and managing cybersecurity incident response, investigations, and regulatory reporting.
• Strong knowledge of cybersecurity principles, risk management, security controls, threat and vulnerability management, and IT/OT security.
• Excellent communication, leadership, analytical, and stakeholder management skills.

The ideal candidate is a high-performing strategic leader who drives results and inspires others through integrity, accountability, and strong communication. Combines business acumen and continuous improvement to achieve sustainable business outcomes and enhance customer experience. Builds trust through self-awareness and ethical leadership while empowering others to reach their full potential. Cultivates strong stakeholder relationships, high-performing teams, and creates organizational agility to successfully navigate change and deliver long-term success.

Job Category: Management

Job Type: Full Time

Req ID: 9515

Pay Group: VDD

Cost Center: NONE

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions upon request.

Transdev is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sex, color, national origin, age, disability, veteran status, genetic data, gender identity, sexual orientation, religion or other legally protected status, or any other classification protected by federal, state, or local law.

Drug-free workplace

If based in the United States, applicants must be eligible to work in U.S. without restrictions for any employer at any time; be able to pass a drug screen and background check.

California applicants:

About Transdev

Cities, counties, airports, companies, and universities across the U.S. contract with Transdev to operate their transportation systems, maintain their vehicle and fleets, and deliver on mobility solutions. Transdev U.S. employs a team of 32,000 across 400 locations while maintaining more than 17,000 vehicles.

Part of a global company, Transdev is a leader in mobility with operations in 19 countries, proudly operated by 110,000 team members from around the world. As an operator and global integrator of mobility, we are driven by our purpose. Transdev – the mobility company – empowers the freedom to move every day thank to safe, reliable, and innovative solutions that serve the common good. Find out more at http://www.TransdevNA.com or watch an overview video.