Strategic CISO: Rail Cybersecurity & Risk Leadership

Transdev North America, Inc.; Boston (MA); On-site; USD 160,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

STI opportunity

Job summary

Bay State Rail, a joint venture between Transdev North America and Transport UK, is seeking a Chief Information Security Officer to lead cybersecurity across IT, OT, and critical rail assets in the Boston region. The CISO reports to the CIO and shapes the strategic direction for policy, risk management, incident response, and regulatory compliance to ensure safe and reliable commuter rail operations.

The ideal candidate will bring 5+ years in cybersecurity management, certifications such as

Qualifications

• Minimum of five (5) years of professional experience in cybersecurity management and information security.
• Professional certification such as CISSP or CISM.
• Demonstrated experience in rail transit, transportation, critical infrastructure, or comparable mission-critical environments.
• Experience implementing cybersecurity frameworks and managing incident response/regulatory reporting.
• Strong knowledge of cybersecurity principles, risk management, controls, threat and vulnerability management, and IT/OT security.

Responsibilities

• Lead and oversee the organization's cybersecurity program for IT/OT and critical infrastructure.
• Develop, implement, and maintain cybersecurity policies, standards, frameworks, and controls.
• Oversee cybersecurity risk assessments, threat and vulnerability management, and security measures.
• Lead cybersecurity incident response, investigations, recovery activities, and regulatory reporting.
• Monitor effectiveness of cybersecurity controls, identify emerging threats, and recommend mitigations.
• Coordinate cybersecurity activities with CIO, stakeholders, vendors, host railroads, contractors, and government agencies.
• Provide strategic cybersecurity advice to management and promote awareness and continuous improvement.

Skills

Cybersecurity management

Information security

Risk assessment

Regulatory compliance

Incident response

CISSP/CISM certification

Rail transit experience

Leadership & communication

Job description

Bay State Rail, a joint venture between Transdev North America and Transport UK, is seeking a Chief Information Security Officer to lead cybersecurity across IT, OT, and critical rail assets in the Boston region. The CISO reports to the CIO and shapes the strategic direction for policy, risk management, incident response, and regulatory compliance to ensure safe and reliable commuter rail operations.

The ideal candidate will bring 5+ years in cybersecurity management, certifications such as