REM - Cybersecurity Manager (Services)

Req ID:400799 

Imagine playing a central role in reducing the carbon footprint of Canada’s busiest public transit system and doing so with a consistently ranked Top Employer with a global reach. As part of the ONxpress consortium, Alstom is proudly working to transform the collective mobility of the Greater Toronto and Hamilton areas (GTHA) through the On-Corridor Works project, and we are hiring for hundreds of roles. The GO Expansion scope : new electric locomotives, fleet upgrades, train control systems, network electrification, signalling, telecommunications and digital systems, maintenance, and much more.

Purpose of the Job

Organize and manage Cybersecurity activities during Project (contract execution) or Program (internal development).

Accountabilities

• Analyze Project / Program security needs (including laws and local regulations), determine security objectives and main security risks strategy
• Plan security activities within Operation and Maintainence life cycle, estimate costs and duration, their impacts related to project program execution, Identify training needs 
• Is responsible for Cost / Quality / Delay of Project/ Program Cybersecurity deliverables, as needed per  Project / program  context :  
  • Cybersecurity context, and Cybersecurity Risk Analysis 
  • Cascading of requirement to suppliers,  Manage Third Parties Risks
  • Application of  Cybersecurity Assurance Level 
  • Definition of Cybersecurity Policy and Operating Procedures
  • Evaluation of  the Project/Program achieved Cybersecurity level
• Obtain agreement from Project/Program/Customer about on the set of security measures to be implemented 
• Manage vulnerabilities and Cybersecurity issues and actions plan
• Manage Program/Project Cybersecurity related communication
• Report on Program/Project Cybersecurity status
• In case of external Cybersecurity audit, manage the relationship with auditors Establish lessons learned
• Promoting the Alstom Code of Ethics and adhering to the highest standards of ethical conduct.

Key Job Authorities and Dimensions

• Responsible of the QCD of its Project/Program Cybersecurity Work Package
• Functional animation of Cybersecurity Engineer team (typically from 1 to 5)
   

Performance Measurement

• No "NO GO" for Cybersecurity reasons in Gate Reviews
• Quality of Cybersecurity deliverables, in time
• Achievement of Project/Program targeted level of Cybersecurity 
• Assessment findings: Low rework due to external or internal assessments
• Vulnerability management is in place
• Respect of Cybersecurity activities QCD commitment 
• Cybersecurity issues/incident resolution
   

Educational Requirements

Mandatory: University/ Engineer in degree level

Desirable: Cybersecurity certification such as: GICSP, CISSP, GSEC, CISM

Experience

Mandatory:

• Experience with direct responsibility for hands on architecture, design, development 
• Experience related to Cybersecurity in general, deployment experience of security technologies.
• QCD Management
   

Desirable:

• Knowledge of Alstom Products & Solution Portfolio
• Experience in embedded or industrial systems (railway/ aeronautics ...) 

Competencies & Skills

• Engineering Background
• Knowledge of main Cybersecurity standards and regulations, such as: ISO 2700X, 62443, NIST, NIS, French LPM
• Knowledge of some Cybersecurity solutions and areas
• Methods of Cybersecurity risk analysis 
• Architecture concepts and techniques of systems and networks, operating systems and associated programming languages
• Knowledge of the main techniques for evaluating systems security
• Dynamic, autonomous, creative and ability to work in a complex environment.

Alstom is the leading company in the mobility sector, solving the most interesting challenges for tomorrow’s mobility. That’s why we value inquisitive and innovative people who are passionate about working together to reinvent mobility, making it smarter and more sustainable. Day after day, we are building an agile, inclusive and responsible culture, where a diverse group of people are offered opportunities to learn, grow and advance in their careers, with options across functions and geographic locations. Are you ready to join a truly international community of great people on a challenging journey with a tangible impact and purpose?  

Equal opportunity statement:
Alstom is an equal opportunity employer committed to creating an inclusive working environment where all our employees are encouraged to reach their full potential, and individual differences are valued and respected.  All qualified applicants are considered for employment without regard to race, colour, religion, gender, sexual orientation, gender identity, age, national origin, disability status, or any other characteristic protected by local law.