OT Cyber Security Advisor

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

The Cybersecurity Advisor ensures consistency of project solutions that are cyber secure by design. That is, according to defined cybersecurity policy, technical roadmap, and Customer requirements/needs. Leads and provides guidance for all project cybersecurity activities, ensuring that the project is adhering to Hitachi Rail, Signalling and Rail Solutions (SRS) and customer cybersecurity requirements. The Cybersecurity Advisor will also define, review, manage, and in some cases execute the cybersecurity activities (security management plans, requirements, risk assessments, vulnerability assessments, etc.).
 

• Overseeing and maintaining the cybersecurity process that includes defining the security activities in the project/product development lifecycle including plans, requirements, design, risk assessment, testing, vulnerability management, etc.

• Adopting the industry standards and methodologies for cybersecurity assessment and project development.

• Aligning to, leveraging from and contributing to the Hitachi Rail SRS Cybersecurity guidelines.

• Assessing bids and bid requirements and incorporating those into design and cost options for projects.

• Providing specialty engineering in the form of consultation services for project and product, and conducting risk assessments and technical vulnerability assessments.

• Interfacing with the Global Business Unit Ground Transportation Systems for corporate guidance on use of industry standards, and following Hitachi Rail group processes and policies.
   

• • Ability to make public presentations and demonstrations to customers.

  • Excellent writing skills, with experience developing technical documentation and writing papers.

  • Ability to assess team competencies and provide guidance.

  • Working experience with security standards: ISO 27001/2, NIST SP 800 series, IEC 62443.

  • Product development, industrial engineering, and industrial control systems expertise.

  Base Salary Range : $114,000- 147,000

    

  The Company provides an extensive benefits program for all full-time employees working 24 or more hours per week and their eligible dependents, including the following: 

  • Health, Dental and Vision plans - 100% of premiums are company-paid 
  • Retirement Savings Plan with a company match
  • Company paid holidays - 3 weeks of vacation
  • Company provided Life and accident Insurance,  LTD 
  • Worklife programs such as Flextime and a variety of Development and Training opportunities 

   

  This posting relates to an existing vacancy. 

   

  Our hiring process uses both human and technology‑assisted (AI) tools to support candidate screening and assessment. All results are reviewed by people, and all hiring decisions are made by people.

• Expertise on project and software development lifecycle, gates and process-oriented.

• Good communication skills, with the ability to communicate effectively and succinctly with senior management about complex technical matters.

• More than 5 years of experience in cybersecurity architecture, design, risk assessment, and development.

• University degree in Engineering, Computer Science or equivalent work experience.

• Familiarity with cybersecurity processes, standards, and industry best practices related to engineering and software development.

• CISSP security designation or equivalent preferred.

• IEC 62443 expertise is a plus.

• Fluency in English (written and spoken).