Head of Cyber Security

The Head of Cyber Securityspecializing in Operational Technology (OT) for Railway Systems plays a vital role in protecting the integrity, availability, and confidentiality of railway infrastructure from cyber threats. This position focuses on securing OT environments, including signaling systems, train control, communication networks, and other mission-critical assets crucial for safe and efficient railway operations. The officer will support cross-functional teams in implementing security measures, ensuring compliance with regulations, and addressing emerging risks in a high-stakes industry.

Assist in assessing and prioritizing risks for railway OT through vulnerability scans and threat modeling support.

Contribute to designing and implementing OT-specific controls (e.g., firewalls, IDPS, encryption) with minimal disruption.

Monitoring & Incident Response:
Support OT network monitoring, assist in incident response, and utilize SIEM tools for threat detection under supervision.

Monitor SOC subcontractor performance, ensuring SLA compliance through metrics and review support.

Regulatory Compliance:
Ensure adherence to standards like IEC 62443, NIST, EN 50128/50129; assist in audits and compliance reporting.

Collaboration:

Work with IT, engineering, vendors, and stakeholders to integrate cybersecurity across the OT lifecycle.

Support delivery of OT-focused cybersecurity training to mitigate human vulnerabilities.

Assist in adopting advanced solutions (e.g., AI, zero-trust) to address evolving threats.

Maintain security records and contribute to executive reports on risk and posture.

Coordinate with internal teams and regulatory safety entities as directed.

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field.

• Certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), GIAC (Global Information Assurance Certification) for Industrial Control Systems, or railway-specific credentials are highly desirable.

• Minimum of 10 years in cybersecurity, with at least 3 years focused on OT/ICS (Industrial Control Systems) environments, preferably in the railway industry. Demonstrated experience in managing subcontractors and SOC operations is essential.