Project Cybersecurity Manager

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Could you be the full-time Project Cybersecurity Manager in Santa Perpetua de Mogoda we’re looking for?

Your future role

Take on a new challenge and apply your cybersecuirty expertise in a new cutting-edge field. You’ll report to Engineer Domain/Metier Department Head, and work alongside young and proactive teammates.

You'll define the Project Cybersecurity Management plan and all Cybersecurity deliverables. Day-to-day, you’ll work closely with teams across the business (engineering), perform security risk assessment of the solution delivered on the project and much more.

You’ll specifically take care of taking into account the Mainline Platform solutions and additional project constraints, to specify and validate the suitable cybersecurity architectures, and counter measures for each of the non-acceptable risks.

We’ll look to you for:

• Define the Project Cybersecurity Management plan following applicable Alstom processes, rules and guidelines and verify these are followed by the project.
• Analyze Project security needs (including standards and regulations), determine security objectives and main security risks strategy.
• Plan security activities within the project development life cycle, estimate costs and duration, their impacts related to project execution
• Manage the Project Cybersecurity deliverables
• Manage Cybersecurity architecture and requirement allocation
• Provide support during technical design meetings for cybersecurity activities
• Obtain agreement from Project/Customer about the set of security measures to be implemented
• Establish Cybersecurity context, and perform Cybersecurity Risk Analysis
• Liaise with the mainline platform team to define the most suitable solution
• Cascade requirements to suppliers, and apply Cybersecurity Assurance Level
• Manage Third Parties Risks
• Define the Cybersecurity Operating Procedures
• Evaluate the Project achieved Cybersecurity level
• In case of external Cybersecurity audit, manage the relationship with auditors

All About You

We value passion and attitude over experience. That’s why we don’t expect you to have every single skill. Instead, we’ve listed some that we think will help you succeed and grow in this role:

• Master’s Degree in Engineering/Technology or related field
• More than 3 years of experience
• Knowlpedge and experience in main standards and regulations cyber and regulations: ISO 2700X, 62443, ENS, NIS, CRA
• Knowledge of some security solutions and areas: IAM, PKI, DLP, FW, IDS/IPS, Antimalware, 2FA,etc…
• Knowledge on methodologies or framework about Management and Analysis Risk (Pilar, Ebios, NIST, etc…)
• Experience related to Cybersecurity in general, deployment experience of security technologies.
• Architecture concepts and techniques of systems, communication networks, operating systems and associated programming languages
• Methods of Cybercurity risk analysis
• High level in English is a must (B2 or C1 level)
• Knowledge in Railway Sector or Industry will be a plus.

Things you’ll enjoy

Join us on a life-long transformative journey – the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You’ll also:

• Enjoy stability, challenges and a long-term career free from boring daily routines
• Work with innovative cybersecurity railway projects
• Collaborate with transverse teams and helpful colleagues
• Contribute to innovative projects
• Steer your career in whatever direction you choose across functions and countries
• Benefit from our investment in your development, through award-winning learning
• Benefit from a fair and dynamic reward package that recognises your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension)

You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you!

Important to note

As a global business, we’re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.