Project Cybersecurity Manager

Eductational Qualification:

• Any Batchelor Degree (BE/B.Tech) and above.

Proffessional Experience:

• Min 8+ years and above

Key accountabilities:  

• Analyze Project / Program security needs (including laws and local regulations), determine security objectives and main security risks strategy 

• Plan security activities within development life cycle, estimate costs and duration, their impacts related to project program execution, Identify training needs  

• Is responsible for Cost / Quality / Delay of Project/Program Cybersecurity deliverables, as needed per  Project / program  context :   

• • Cybersecurity context, and Cybersecurity Risk Analysis  

• • Cybersecurity Architecture definition and requirement allocation 

• • Cascading of requirement to suppliers,  Manage Third Parties Risks, 

• • Application of  Cybersecurity Assurance Level  

• • Definition of Cybersecurity Operating Procedures 

• • Evaluation of  the Project/Program achieved Cybersecurity level 

• Provide support during technical design meetings for cybersecurity activities 

• Obtain agreement from Project/Program/Customer  about on the set of security measures to be implemented  

• Manage vulnerabilities and Cybersecurity issues and actions plan,  

• Manage Program / Project Cybersecurity related communication,  

• Report on Program / Project Cybersecurity status 

• In case of external Cybersecurity audit, manage the relationship with auditors Establish lessons learned 

• Promoting the Alstom Code of Ethics and adhering to the highest standards of ethical conduct. 

Key Job Authorities and Dimensions  

• Responsible of the QCD of its project/program Cybersecurity Work Package 

• Functional animation of Cybersecurity Engineer team (typically from 1 to 5) 

 Performance measurements: 

• No "NO GO" for Cybersecurity reasons in Gate Reviews 

• Quality of Cybersecurity deliverables, in time 

• Achievement of Project/Program targeted level of Cybersecurity  

• Assessment findings : Low rework due to external or internal assessments 

• Vulnerability management is in place 

• Respect of Cybersecurity activities QCD commitment  

• Cybersecurity issues/incident resolution