The Railway industry today is characterized by both a strong and sustained growth across the world. The trends that drive this are well known: With 6B€ of Sales and around 30,000 employees based in over 60 countries, Alstom  develop & market the most complete range of systems, equipment and services offered today in the railway sector. Today we offer our customers solutions that feature a seamless blend of diverse technologies, ensuring optimal interfaces, along with flexible implementation and real synergy in innovation.

Reporting directly to ALSTOM Cybersecurity VP, the Service PTF Cybersecurity Manager role is to set-up an implement the cybersecurity strategy and means regarding the services activity (like service dedicated tools or industrial installation). The Service PTF Cybersecurity Manager is also indirectly reporting to the Service PTF VP or its representative for Cybersecurity.

The Service PTF Cybersecurity Manager is reporting directly to ALSTOM Cybersecurity VP and indirectly reporting to the Service PTF VP or its representative for Cybersecurity.

RESPONSABILITIES

The Service PTF Cybersecurity Manager is the point of contact for Service Platform teams for cybersecurity related subjects. He is in charge of the following activities:

• Maintain, in collaboration with Service PTF Management Team and with Program Managers of Service related developments, the Services Platform cybersecurity Roadmap.
• Contribute to Cyber Security PAB and PRB on his scope
• Set up a homologation Process validating the correct management of cybersecurity risks before every deployment of any tools on a maintenance project.
• Drive and validate the security homologation of every deployment of tools on a maintenance project.
• Monitor developments on Services related Tools on CyberSecurity aspects.
• Define cybersecurity good practices & policies to be applied on maintenance project industrial sites.
• Support and deploy in the Platform team cybersecurity knowledge and processes  (coaching, awareness & trainings)
• Support Region CyberDefense Manager: participate to Tender Review or Design Reviews when requested.
• Define with tender teams generics answers on cybersecurity aspects for all maintenance project offers.
• Contribute to global Cybersecurity policies, processes and standards definition

Optionally:

• Realize Cybersecurity activities or manage the Cybersecurity subcontractors (Risk Assessment)
• Run vulnerability audits and define recommendations & mitigation procedures.
• Ensure technological watch for cybersecurity (latest threats identified with associated action plans; latest technologies& tools to be deployed
• Participates and contributes to the evolution of norms applicable in Transport on cybersecurity.
• COS / COTS Supplier Assessment

COMPETENCIES & SKILLS

• Engineering Background
• Knowledge of main Cybersecurity standards and regulations, such as: ISO 2700X, 62443, NIST, NIS, French LPM
• Knowledge of some Cybersecurity solutions and areas

EDUCATIONAL REQUIREMENTS

Mandatory: University / Engineer in degree level – Master’s Degree

Desirable:  Cybersecurity certification such as:  GICSP, CISSP, GSEC, CISM, …

KNOWLEDGE/EXPERIENCE

Mandatory:

• Experience with direct responsibility for hands on architecture, design, development
• Experience related to Cybersecurity in general, deployment experience of security technologies.
• QCD Management

At Alstom Transport, we offer you the opportunity to unleash your potential and reinvent yourself. As a future employee, you will have a unique opportunity to drive our organization forward, while continuing to build your career and contribute to the expanding growth of the global railway industry.

More information about Alstom can be found at: www.alstom.com