Cybersecurity Architect

Cybersecurity Architect

Location: Saint-Ouen, J, FR

Company: Alstom

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80,000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Reporting directly to a Security Architecture Manager, the Cybersecurity Architect defines security architecture patterns and contributes to design the appropriate security mechanisms and tools to be implemented within the Alstom Information System. He/She is part of a team of security architects who define and support security solutions, standards and rules to be implemented to enforce the Security Policy in all Infrastructure and Business projects.

MAIN RESPONSABILITIES

• Project Assessment: Identify project needs and gather functional and technical requirements.
• Use Case Development: Define use cases, create an enablement roadmap, and establish Acceptance Testing criteria.
• Business Case Creation: Develop a business case with Total Cost of Ownership (TCO) analysis.
• Architectural Documentation: Validate or produce Architecture Design Documents (ADD) and specify integration requirements.
• Stakeholder Engagement: Present solutions and create a service catalog for enhancement by the Solution Manager.
• Security Standards: Conduct security studies, validate architectures, and implement infrastructure hardening.
• Leadership: Lead subcontractors during design and build phases.
• Monitoring and Improvement: Engage in technology monitoring and drive continuous improvement of cybersecurity solutions.
• Operational Support: Provide troubleshooting expertise and assist in the development of cyber solutions.
• Roadmap: Define roadmaps and support budgeting for security projects.

The Cybersecurity Architect follows and validates the security aspects in Alstom’s IT projects - Key responsibilities as cyber architect are:

• Review and approve security deliverables: information system security questionnaires, architecture design documents.
• Risk analysis – perform risk analysis and identify mitigation plan when relevant.
• Security Insurance Plan – ensure that all IT partners/providers respect the security policy when they deliver services (e.g. Cloud or SaaS provider).
• Security Acceptance – make the right decision considering the residual risk and the asset value.

QUALIFICATIONS

• Bachelor's/Master's degree in Engineering/Technology.
• CISSP or CISM.
• Experience in Transport Industry is a plus.
• 7 years of work experience in cybersecurity, 3 years in architecture and design.

GENERAL COMPETENCIES & SKILLS

• Knowledge and understanding in Security Architecture / Infrastructure Architecture.
• Able to identify and document specific security issues, propose resolution options, and interpret matters from the perspective of involved stakeholders.
• Able to analyse technical risks and vulnerabilities and to design the appropriate network security pattern (firewalling, proxy, WAF, VPN, etc.).
• Good understanding of security tools and mechanisms (IDS/IPS, antivirus, anti-malware, authentication mechanisms, IAM, PKI, encryption, etc.).
• Good understanding of cloud solutions (Microsoft Azure/O365, security solutions in and for the cloud).
• Knowledge of ISO 27002 and ISO 27005.
• Fluency in English.

You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you!

Important to note

As a global business, we’re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.