Program Cybersecurity Manager

Date: 23 juil. 2021

Lieu: Charleroi, WHT, Belgique

Entreprise: Alstom

Req ID:104246 

Nous créons des innovations intelligentes pour relever les défis de la mobilité d’aujourd'hui et de demain. Nous concevons et fabriquons une gamme complète de systèmes de transport, des trains à grande vitesse aux bus électriques et trains sans conducteur, en passant par les solutions d'infrastructure, de signalisation et de mobilité digitale. Nous rejoindre, c’est intégrer une communauté internationale de plus 75000 personnes qui se consacrent à la résolution de problèmes de mobilité concrets et à la réalisation de projets internationaux ayant un impact local durable.

 

INTRODUCTION

 

Alstom develops & markets the most complete range of systems, equipment and services offered today in the railway sector. Today we offer our customers solutions that feature a seamless blend of diverse technologies, ensuring optimal interfaces, along with flexible implementation and real synergy in innovation.

One of the last challenges faced by the railway sector is to take into account the cybersecurity within their solutions:  Railway systems, as with most Industrial Automation Control Systems (IACS), have been considered immune to cyber security threats and attacks for years. Nevertheless, the increase of interconnected and digitalized assets in the railway sector and the parallel increase of cyber-crime targeting IACS have driven the need for a coordinated approach to cybersecurity implementation.

 

Overview:

The program cybersecurity manager will manage cybersecurity for mainline program under the responsibility of an experimented Program Cyber Security Manager

The primary responsibilities of the Program Cybersecurity manager are:

  • For program cybersecurity management:
    • To perform security risk assessment of mainline railway sub-system;
    • Taking into account the railway sector constraints, to specify and validate the suitable architectures, solutions and counter measures for each of the not-acceptable risks;
    • To define the Cybersecurity processes, rules and guidelines of the Program and ensure these ones are followed.
  • For technical mentoring:
    • To define cybersecurity solution with the program manager;
    • To mentor people how to implement cybersecurity solutions;
    • To follow cybersecurity test implementation.

 

Specific responsibilities of the role: 

  • Perform solution cybersecurity security assessment, including Zones and Conduits architectures
  • Identify the not acceptable risks for each component and/or sub-system
  • Liaise with the platform and program team to define the most suitable solution reducing the risk to an acceptable value
  • Specify the platform cybersecurity requirements and validate their implementation
  • Perform technological watch and vulnerability analyses for program.
  • Participate to implementation of cybersecurity within Alstom processes
  • Verify that all parts of the program organisation, including subcontractors, perform their work according to the applicable security requirements, security rules, security guidelines, security information
  • Support mainline platform cybersecurity manager in joint programs tackling the issue of the cybersecurity in the railway with a specific focus on PKI implementation and cybersecurity tests
  • Mentor the cybersecurity test platform program, provide the main guideline for the research program and help to tackle technical implementation issues.

 

SKILLS & EXPERIENCE

 

Education: Master’s degree in Engineering/Technology or related field

 

 

Desired knowledge / Experience:

  • Minimum 3 years of experience in Railway signaling systems with strong architecture and functional knowledge.

 

 

Skills & competencies:

  • Fluent with Linux and window OS (services, configuration, …)
  • Fluent in English (spoken and written)
  • Strong interest for cybersecurity
  • leadership skills, capability to drive and motivate teams
  • Ability to drive change through innovation & process improvement
  • Strong analytical skills with demonstrated problem solving ability
  • Proven planning, prioritization and organizational skills
  • Professional & concise communication (written & verbal)

Les engagements de notre entreprise se fondent sur une culture agile, inclusive et responsable qui offre à des personnes de tout horizon l’opportunité de se développer, d’apprendre et de progresser tout au long de leur carrière. Nous encourageons nos salariés à réaliser pleinement leur potentiel, tout en leur accordant l’estime et le respect dus à chaque individu.

 

Job Type:​Expérimenté