IT/OT Cybersecurity Architect

It’s not just about your career or job title… It’s about who you are and the impact you will make on the world. Because whether it’s for each other or our customers, we put People First. When our people come together, we Expand the Possible and continuously look for ways to improve what we create and how we do it. If you are constantly striving to grow, you’re in good company. We are revolutionizing the way the world moves for future generations, and we want someone who is ready to move with us.

Who will you be working with?

Join Enterprise Information Security (EIS) to drive cybersecurity excellence leveraging intelligence, strategic partnerships, and analysis. Collaborate daily with GRC, Architecture, Operations, and key Information Technology stakeholders to advance our information security capabilities.

How will you make a difference?

Join Enterprise Information Security and play a key role in safeguarding IT systems and services. As a Security Architect, reporting directly to the Manager of Security Architecture, you will design and implement security requirements and controls for enterprise services like EDR, IAM, email security, DLP, and related technologies. Ensure the security and integrity of Wabtec's enterprise environments, provide technical security guidance to cross-functional teams, and analyze existing application services and infrastructure designs to suggest remediations and reduce information security risks. Join us and lead the charge in cybersecurity excellence!

What do we want to know about you?

You must have:

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience
• 8+ years of experience in cybersecurity, with time spent in a security architecture role
• Deep understanding of security frameworks
• Strong knowledge of cloud security (AWS, Azure, OCI), network security, identity and access management, and data protection
• Experience with GRC tools and processes
• Excellent communication, leadership, and stakeholder management skills
• Ability to communicate risk and drive architecture recommendations to completion
• Relevant certifications preferred: CISSP, SABSA, CCSP, CISM, TOGAF, or equivalent

We would love it if you had:

• Experience with OT environments and AI

What will your typical day look like?

• Demand Management & Intake:
  • Lead and optimize the intake process for new security architecture requests
  • Collaborate with business, operations, and IT stakeholders to assess and prioritize security architecture needs
  • Define and maintain workflows for intake, triage, and assignment of architecture reviews
• Architecture Governance & Design:
  • Develop and maintain enterprise-wide security architecture standards and reference models
  • Ensure alignment of security architecture with business goals, compliance requirements, and risk management strategies
  • Review and approve security designs for new and existing systems, ensuring architectural integrity and adherence to best practices
• Implementation Oversight:
  • Provide implementation guidance of approved security architectures across projects and initiatives where requested
  • Monitor progress and confirm security controls are properly implemented in solutions.
  • Provide technical leadership and mentorship to project teams and junior architects
• Collaboration & Communication:
  • Act as a liaison between the CISO, enterprise architects, and business units
  • Prepare and present architecture review findings and recommendations to executive leadership
  • Foster a culture of security by design across the organization

What about the physical demands of the job?

• Regularly remaining in a stationary position, often standing or sitting for prolonged periods
• Regularly communicating with others to exchange information
• Regularly required to attend meetings in person and virtually using video and audio computer equipment
• Regularly repeating motions that may include the wrists, hands, and/or fingers, such as typing
• Occasionally moving about to accomplish tasks or moving from one worksite to another
• Occasionally light work that includes moving objects up to twenty pounds
• You may also be asked to perform other duties outside of your function or trade, for which adequate training will be provided if necessary.

Work Environment:

• Hybrid work schedule (both on-site and remote)
• The employee will normally work in a temperature-controlled office environment, with frequent exposure to electronic office equipment. During visits to areas of operations, may be exposed to extreme cold or hot weather conditions.  Is occasionally exposed to fumes or airborne particles, toxic or caustic chemicals, and loud noise

LI-TD1

Our job titles may span more than one career level. The salary range for this role is between

The actual salary offered to a candidate may be influenced by a variety of factors, such as: training, transferable skills, work experience, education, business needs, market demands and work location. The base pay range is subject to change and may be modified in the future. More information on offered benefits, which include health, welfare, and retirement, are available at mywabtecbenefits.com. Other benefit offerings for this role may include an annual bonus, if eligible.

Who are we?