VAC - Engineer - Cyber Security (ICT & IT/OT)

Job Summary

Railways for the world of tomorrow.

Responsibilities

• Develop cyber security strategy and framework for railway and metro projects.
• Advise client organizations on cybersecurity requirements for CBTC (GOA4 Opera-tion), TVS, BMS, SCADA, Telecom, AFC, Rolling stock and other rail systems.
• Development of comprehensive set of cybersecurity requirements for the project, tailored to local regulations and best practices.
• Implement verification and validation stage for cyber risk assessments, threat modeling, and vulnerability analysis to assess the compliance of proposed rail system solutions with the technical and functional requirements.
• Client and Stakeholder management for Cyber Security related works
• Ensure compliance with following standards as minimum:
  • IEC 62443 (Industrial Network Security) and upcoming latest standards
  • ISO/IEC 27001
  • TS 50701 (Cybersecurity for railway applications)
  • Local and national cybersecurity regulations.
• Good Understanding of Private and Public Cloud networks platforms, Virtualized Machine/Storage architecture and different applications used for VM/storage.
• Responsible for tender preparation, including defining technical specifications and evaluation criteria for cyber-related scopes.
• Support to tender team and client to define the evaluation criteria for the technical proposal submitted by contractors, preparation of query response and attending the pre-bid meetings if required.

Qualifications

• Bachelor's or Master's in Cybersecurity, IT, Electronics, or Railway Engineering
• Preferred Certifications in CISSP, CISM, IEC 62443 Certified Expert, CEH, or equivalent
• Knowledge of CENELEC 50126/50128/50129 is desirable
• 8-15 years of cybersecurity experience with at least 3-5 years in rail/metro sector
• Proven experience in consultancy or advisory and designer roles on large infrastructure or railway/Metro projects. Experience in Gulf/European projects is an added advantage.
• Familiarity with project lifecycle stages, especially design, tendering, and system integration
• Understanding of Server Configuration, Virtualization and other related latest technologies is an added advantage.