Cybersecurity Governance & Risk Lead (Remote-Optional)

Amtrak; United States; On-site; USD 113,000 - 147,000; Full time

Benefits offered by this job

Health, Dental, Vision Insurance

401K with Employer Match

Paid Time Off

Job summary

Amtrak seeks a Principal Cybersecurity Systems Security Officer to lead the cybersecurity governance, risk management, and assurance program across assigned systems. You will drive security-by-design, DevSecOps practices, and ensure control effectiveness to support availability and reliability of operations.

In this role, you will manage and develop cybersecurity staff, partner with engineering, operations, compliance and leadership to deliver measurable risk reduction, while translating

Qualifications

• Bachelor’s degree or equivalent combination of education, training and/or relevant experience.
• CISSP certification or equivalent security credentials preferred.

Responsibilities

• Develop and maintain security documentation and evidence artifacts across programs.
• Lead security governance, risk management, and assurance readiness activities.
• Drive continuous monitoring, control implementations, and remediation planning.
• Partner with engineering, operations, and compliance to integrate security requirements into system design and lifecycle processes.
• Coordinate security programs and communicate risk with leadership and stakeholders.

Skills

Security governance

Risk management

DevSecOps practices

Security architecture

Threat modeling

ISMS ISO27001

GRC tooling

Cloud security

Education

Bachelor’s Degree

CISSP certification

Tools

GRC tooling

Job description

Amtrak seeks a Principal Cybersecurity Systems Security Officer to lead the cybersecurity governance, risk management, and assurance program across assigned systems. You will drive security-by-design, DevSecOps practices, and ensure control effectiveness to support availability and reliability of operations.

In this role, you will manage and develop cybersecurity staff, partner with engineering, operations, compliance and leadership to deliver measurable risk reduction, while translating