OT Cyber Security Advisor

Location: Toronto, Canada

Thales people architect solutions that support 85 million mainline and suburban passenger journeys, worldwide, every day. Our Rail Signalling and Communication systems are used on metro lines across major cities, and 72,000 kms of route, 52,000 trains per day in 16 countries are controlled by our Traffic Management Systems. Together We deployed the first-ever nationwide ticketing system which processes over 50 million ticketing transactions in 100 cities daily.

Thales provides world-leading Communications-Based Train Control (CBTC) and interlocking for mass rail transit applications globally. The Centre of Competence for Urban Rail Signalling is located right before you at mid-town Toronto. As the largest office in Canada, we house a department for every step of the Software Development Lifecycle (SDLC)! This includes Software, Hardware, Systems Design, Verification & Validation, Operations, etc. The supporting corporate shared services teams in Finance, Human Resources and IT is also located at the office. Our office space was designed to provide a sustainable, healthy workplace that expresses TRSS’s brand while increasing collaboration. Features include Greenguard furniture, EnergyStar appliances, low-emitting adhesives, sealants, and sliding glass doors on internal offices provide daylight and views to the outside. Come join the big Transport family, here in Toronto!

The Cyber Security Advisor ensures consistency of project solutions according to the defined cyber security policy, technical roadmap and Customer requirements/needs. Leads and provides guidance for all project cybersecurity activities ensuring that the project is adhering to Thales Urban Rail Signaling (URL) and customer cybersecurity requirements.

They will also define, review, manage and in some cases execute the cybersecurity activities (security management plans, requirements, risk assessments, vulnerability assessments, etc.).

Key Accountabilities:

• Overseeing and maintaining the cybersecurity process that includes defining the security activities in the project/product development lifecycle including plans, requirements, design, risk assessment, testing, vulnerability management, etc.
• Adopting the industry standards and methodologies for cybersecurity assessment and project development
• Aligning to, leveraging from and contributing to the GTS Cyber Security guidelines
• Assessing bids and bids requirements and incorporating those into design and cost options for projects
• Providing specialty engineering in the form of consultation services for project and product, and conducting risk assessments, and technical vulnerability assessments
• Interfacing with the Global Business Unit GTS for corporate guidance on use of industry standards, and following Thales group processes and policies
  
  

Key Requirements:

• University degree in Engineering, Computer Science or equivalent work experience
• Expertise on project and software development lifecycle, gates and process oriented
• More than 5 years of experience in cybersecurity architecture, design, risk assessment and development
• Good communication skills, with the ability to communicate effectively and succinctly with senior management about complex technical matters
  
  

Preferred Qualifications:

• Ability to make public presentation and demonstration to customers
• Excellent writing skills, experience writing papers, and technical documentation
• Ability to ascertain the skills and competency of staff assigned
• Working experience with security standards: ISO 27001/2, NIST SP 800 series, IEC 62443
• CISSP security designation
• Product development, industrial engineering and industrial control systems expertise
  
  

Thales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience.