Program Cybersecurity engineer

Job Description

The Railway industry today is characterized by both a strong and sustained growth across the world. The trends that drive this are well known: environmental challenges, population growth, urbanization and increasing demands for mobility. With 16,5B\€ of Sales and over 80,000 employees based in nearly 70 countries, Alstom develop & market the most complete range of systems, equipment and services offered today in the railway sector. Today we offer our customers solutions that feature a seamless blend of diverse technologies, ensuring optimal interfaces, along with flexible implementation and real synergy in innovation

INTRODUCTION

Alstom develops & markets the most complete range of systems, equipment and services offered today in the railway sector. Today we offer our customers solutions that feature a seamless blend of diverse technologies, ensuring optimal interfaces, along with flexible implementation and real synergy in innovation.

One of the last challenges faced by the railway sector is to take into account the cybersecurity within their solutions: Railway systems, as with most Industrial Automation Control Systems (IACS), have been considered immune to cyber security threats and attacks for years. Nevertheless, the increase of interconnected and digitalized assets in the railway sector and the parallel increase of cyber-crime targeting IACS have driven the need for a coordinated approach to cybersecurity implementation.

• Meaningful work to secure greener and smarter public transport.
• Working daily in an international environment for a global leader in rail mobility.
• Opportunity to participate closely in the development of cybersecurity in the railway sector.

Job Description

The Railway industry today is characterized by both a strong and sustained growth across the world. The trends that drive this are well known: environmental challenges, population growth, urbanization and increasing demands for mobility. With 16,5B\€ of Sales and over 80,000 employees based in nearly 70 countries, Alstom develop & market the most complete range of systems, equipment and services offered today in the railway sector. Today we offer our customers solutions that feature a seamless blend of diverse technologies, ensuring optimal interfaces, along with flexible implementation and real synergy in innovation

INTRODUCTION

Alstom develops & markets the most complete range of systems, equipment and services offered today in the railway sector. Today we offer our customers solutions that feature a seamless blend of diverse technologies, ensuring optimal interfaces, along with flexible implementation and real synergy in innovation.

One of the last challenges faced by the railway sector is to take into account the cybersecurity within their solutions: Railway systems, as with most Industrial Automation Control Systems (IACS), have been considered immune to cyber security threats and attacks for years. Nevertheless, the increase of interconnected and digitalized assets in the railway sector and the parallel increase of cyber-crime targeting IACS have driven the need for a coordinated approach to cybersecurity implementation.

What we offer:

• Meaningful work to secure greener and smarter public transport.
• Working daily in an international environment for a global leader in rail mobility.
• Opportunity to participate closely in the development of cybersecurity in the railway sector.

Title Of The Role

Program Cybersecurity engineer

Overall Purpose Of The Role

The program cybersecurity engineer will manage cybersecurity for mainline program under the responsibility of an experimented Program Cyber Security Manager.

The primary responsibilities of the Program Cybersecurity engineer are:

• For program cybersecurity management:
  • To perform security risk assessment of mainline railway sub-system;
  • Based on risk assessment, identify the essential cybersecurity requirement needed to comply with the European Cybersecurity Resilience Act.
  • Taking into account the railway sector constraints, to specify and validate the suitable architecture, solutions and counter measures for each of the not acceptable risks;
  • To define the Cybersecurity processes, rules and guidelines of the Program and ensure these ones are followed;
  • To ensure implementation of Cybersecurity Resilient Act at program level.
• For technical mentoring:
  • To define cybersecurity solution with the program manager;
  • To mentor people how to implement cybersecurity solutio