Rail Cyber Chief - Protecting IT/OT & Critical Assets

Transdev North America, Inc.; Boston (MA); On-site; USD 160,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation package

Annual Short-Term Incentive (STI)

Job summary

Bay State Rail, a joint venture involving Transdev North America, seeks a Chief Information Security Officer (CISO) to lead cybersecurity, risk management, and regulatory compliance for the MBTA Regional Rail initiative. You will shape policy, direct incident response, and report to the CIO, aligning security with business goals.

You will drive security strategy across IT/OT, coordinate with partners and agencies, and foster a culture of awareness and excellence while navigating complex

Qualifications

• Minimum of five (5) years of professional experience in cybersecurity management and information security, including expertise in risk assessment, regulatory compliance, and incident response.
• Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent qualifications.
• Demonstrated experience managing cybersecurity programs in rail transit, transportation, critical infrastructure, or comparable mission-critical environments.
• Proven experience implementing cybersecurity frameworks and managing cybersecurity incident response, investigations, and regulatory reporting.
• Strong knowledge of cybersecurity principles, risk management, security controls, threat and vulnerability management, and IT/OT security.
• Excellent communication, leadership, analytical, and stakeholder management skills.

Responsibilities

• Lead and oversee the organization's cybersecurity program, ensuring the confidentiality, integrity, availability, and resilience of IT systems, operational technology (OT), and critical infrastructure.
• Develop, implement, and maintain cybersecurity policies, standards, frameworks, and controls, ensuring compliance with applicable regulatory requirements, contractual obligations, and industry best practices.
• Oversee cybersecurity risk assessments, threat and vulnerability management, and the implementation of appropriate security measures.
• Lead cybersecurity incident response, investigations, recovery activities, and regulatory reporting, ensuring timely and effective management of security incidents.
• Monitor the effectiveness of cybersecurity controls, identify emerging threats and risks, and recommend appropriate mitigation measures.
• Coordinate cybersecurity activities with the CIO, internal stakeholders, third-party service providers, host railroads, contractors, and relevant government agencies.
• Provide strategic cybersecurity advice to management and promote cybersecurity awareness, accountability, and continuous improvement across the organization.

Skills

Cybersecurity leadership

Information security

Regulatory compliance

Incident response

Risk assessment

Rail/transit security

Education

CISSP or CISM certification

Job description

Bay State Rail, a joint venture involving Transdev North America, seeks a Chief Information Security Officer (CISO) to lead cybersecurity, risk management, and regulatory compliance for the MBTA Regional Rail initiative. You will shape policy, direct incident response, and report to the CIO, aligning security with business goals.

You will drive security strategy across IT/OT, coordinate with partners and agencies, and foster a culture of awareness and excellence while navigating complex