At Alstom, we build what millions depend on daily - rail transportation systems that can't afford to fail. We're more than 85 000 people worldwide creating the industry most diverse portfolio: high-speed trains, metros, trams, maintenance services and integrated systems.
More than a job: a mission
Your future role
We are seeking an experienced Cybersecurity Architect with OT systems expertise in critical infrastructure to lead the design, implementation, and maintenance of secure architectures for a major rail project in Victoria. This role requires strong expertise in cybersecurity standards, architecture governance, and collaboration across cross-functional teams, including identity and access management and network communications production.
Your role, your impact
- Lead security analysis and define cybersecurity requirements and architecture for solutions
- Design and maintain resilient, threat-resistant security architecture
- Conduct risk assessments, implement security controls, and evaluate solutions
- Manage cybersecurity aspects of third-party vendors and oversee vulnerability management
- Provide technical guidance to project teams and support design reviews
- Act as the cybersecurity SME for stakeholders, ensuring alignment with governance policies
- Respond to security incidents and deliver post-incident analysis
- Monitor emerging cyber threats, trends, and technologies.
You'll work with sharp, committed teams across Altom — solving complex challenges that shape the future of mobility.
What you bring
-
- A degree in Engineering, Cybersecurity, Computer Science or a related field, or equivalent experience.
- 8+ years' experience in IT/OT cybersecurity architecture, implementation, and risk management, with a focus on security, performance, reliability, and operational availability.
- Hands-on experience implementing cybersecurity controls in metro rail, rail transport, or similar critical infrastructure OT environments.
- Strong understanding of OT environments, systems, network technologies, and cyber-physical constraints affecting safety, physical assets, and service continuity.
- Demonstrated expertise in secure architecture design, defence-in-depth, segmentation, and ISA/IEC 62443 application, including zone and conduit modelling, security level considerations, requirements mapping, and compliance evidence.
- Experience conducting OT cybersecurity and cyber-physical risk assessments, including risk treatment, residual risk documentation, and alignment with recognised standards such as ISA/IEC 62443, ISO 2700X, and NIST.
- Practical experience designing, deploying, or validating OT cybersecurity controls such as firewalls, IDS/IPS, EDR, secure remote access, jump servers, virtualisation security, proxy connections, cloud connectivity, data lake integration, and AD/RADIUS authentication.
- Knowledge of recognised techniques for evaluating system security, including vulnerability assessment and intrusion testing techniques.
- Ability to produce and maintain project cybersecurity artefacts, including security architecture, threat and risk assessments, zone and conduit models, firewall matrices, security requirements, test procedures, and assurance evidence.
- Experience assessing supplier technical solutions, designs, and cybersecurity evidence against project requirements, OT security standards, risk outcomes, and implementation feasibility.
- Strong communication and stakeholder engagement skills, with the ability to work effectively in fast-paced, complex environments.
Alstom, a great place to grow
Perks & Benefits
-
- A diverse role, supporting a major rail project.
- Up to 3 additional leave days per year.
- 18 weeks paid parental leave.
- Volunteering leave.
- Diversity & Inclusion employee network groups.
- Purchased annual leave and a novated leasing scheme.
- Independent and confidential wellbeing support for you and your family.
- Our investment in your development, through award-winning learning.
- Stability, challenges and a long-term career enabling you to steer your progression in whatever direction you choose.
Here, progress isn't always easy — the scale is massive, the tasks are complex — but the impact is real. Because when the system runs, the train moves, and the city connects — that feeling stays with you. And the legacy lasts.