Program manager IT/OT

Job description

Context

Scope focused on Mission Critical systems and strategic projects and programs.

Missions

• Define, design and validate target architectures for Mission Critical systems

• Cover IT, OT, cloud and railway environments

• Embed the principles of Cyber Resilience by Design, Security by Design, Zero Trust and Operational Resilience

• Carry out architecture analyses and studies

• Conduct business impact analyses

• Perform risk analyses

• Identify vulnerabilities, critical dependencies and single points of failure

• Ensure the compliance of architectures and solutions

• Apply regulations, standards and frameworks such as NIS2, CER, CRA, ISO 27001, ISO 22301, IEC 62443 and EN 50701

• Support project teams, architects, asset owners and suppliers

• Define and implement architecture, security, availability and resilience requirements

• Assess technology solutions, proposed architectures and suppliers

  • From a business criticality perspective

  • From a cybersecurity perspective

  • From an operational resilience and lifecycle perspective

• Ensure architectural consistency

• Align architectures with strategic objectives

• Align architectures with service continuity requirements

• Align architectures with the criticality levels Mission Critical, Business Critical, Business Essential and Business Support

• Contribute to enterprise architecture governance

• Take part in architecture reviews

• Take part in decision-making committees

• Contribute to the continuous improvement of the organization’s cyber-resilience maturity

• Promote standardization, simplification and control of technology dependencies

• Strengthen the robustness and sustainability of critical services

• Ensure traceability of requirements and risks

• Link business needs, business capabilities, services, assets, security controls and regulatory requirements

• Guarantee consistent and auditable risk management

Conditions

• Desired start date: 01/01/2027

• End date: 31/12/2031

• Available for on-call duty

Requirements

1. 10+ years of experience

2. At least 2 years in IT/OT/railway cybersecurity and secure architectures

3. At least 5 years applying Safety and Security by Design principles

4. At least 5 years with the NIS2, ISO 27001, IEC 62443, CIS and NIST standards and regulations

5. At least 5 years in risk analysis and vulnerability management

6. At least 5 years with cloud, network, systems, OT and critical infrastructure environments

7. At least 5 years assessing technical solutions and architectures from a security perspective

8. Strong knowledge of IT/OT/railway cybersecurity and secure architectures

9. Proficiency with Safety and Security by Design principles

10. Experience with NIS2, ISO 27001, IEC 62443, CIS and NIST standards and regulations

11. Expertise in risk analysis and vulnerability management

12. Experience in cloud, network, systems, OT and critical infrastructure environments

13. Ability to perform security assessment