OT Cyber Security Advisor

Description

The team works on signalling and rail solutions, with operations worldwide and a focus on digital transformation and new technology.

The role sits in Toronto, Ontario, Canada, within the company Rail Canada Inc., and is a full-time position that is not remote.

This posting is for an existing vacancy.

Responsibilities

• Make sure project solutions are secure by design, in line with cybersecurity policy, the technical roadmap and customer requirements.
• Lead and advise on all cybersecurity work across the project, confirming it meets the rules of the company's signalling and rail business and of the customer.
• Define, review and manage cybersecurity deliverables such as security management plans, requirements, risk assessments and vulnerability assessments, and carry some of them out yourself.
• Run the security process across the project and product development lifecycle, covering planning, requirements, design, risk assessment, testing and vulnerability management.
• Apply recognised industry standards and methods for security assessment and development work.
• Work within and add to the company's signalling and rail cybersecurity guidelines.
• Review tender documents and bid requirements, then build them into design and cost options.
• Provide specialist consultation on projects and products, and perform risk and technical vulnerability assessments.
• Work with the global ground transportation business unit on standards and on group processes and policies.

Requirements

• Know project and software development lifecycles and gate processes well, with a process-focused approach.
• Communicate clearly and briefly with senior management about complex technical topics.
• Have more than 5 years of experience in cybersecurity architecture, design, risk assessment and development.
• Hold a university degree in engineering or computer science, or have equivalent work experience.
• Understand cybersecurity processes, standards and best practices for engineering and software development.
• Be fluent in English, both written and spoken.
• Hold the CISSP or an equivalent security certification, which is preferred.
• Show IEC 62443 expertise, which is a plus.
• Be able to present and demonstrate to customers in public settings.
• Write well, with experience producing technical documentation and papers.
• Assess team skills and guide team members.
• Have worked with ISO 27001/2, the NIST SP 800 series and IEC 62443.
• Bring expertise in product development, industrial engineering and industrial control systems.

Conditions

Full-time role based in Toronto, Ontario, Canada, not remote.

Base salary range is $114,000 to $147,000.

Equal opportunity employer that welcomes differences in background and identity.

Benefits

• Health, dental and vision plans, with 100% of premiums paid by the company.
• Retirement savings plan with a company match.
• Paid company holidays and 3 weeks of vacation.
• Company-paid life and accident insurance, plus long-term disability cover.
• Flextime and a range of development and training opportunities.
• Benefits apply to full-time employees working 24 or more hours a week, and to eligible dependents.