Cybersecurity Expert

Overview

Secure railway/metro systems and OT from cyber threats in UAE project.

Key Responsibilities

• cybersecurity integration
• risk assessment
• incident response
• compliance management
• security training
• documentation

Tasks

-Ensure that cybersecurity is embedded into all system integration activities, ensuring secure connections across all digital platforms, from rail control systems to passenger information services. -Maintain detailed documentation of cybersecurity protocols, policies, and incident reports, providing regular updates and comprehensive reports to senior management and stakeholders. -Stay current with the latest cybersecurity threats, tools, and best practices, implementing continuous improvements to keep the security systems updated and resilient against emerging threats. -Ensure that all networked systems (e.g., signaling systems, control centers, passenger systems, and communication networks) are properly secured through the application of advanced cybersecurity technologies such as firewalls, encryption, and intrusion detection systems. -Identify, assess, and mitigate potential cyber threats and vulnerabilities within the project’s systems and networks. Lead cyber risk assessments, penetration testing, and vulnerability scanning to proactively address security weaknesses. -Conduct cybersecurity training sessions for staff and stakeholders to raise awareness of security best practices and reinforce the importance of safeguarding critical infrastructure. -Ensure adherence to international cybersecurity standards and regulations (e.g., NIST, IEC 62443, ISO 27001, GDPR) and local regulations to meet compliance and safety requirements. -Design and implement comprehensive cybersecurity strategies and frameworks tailored to the specific needs of the railway/metro project, ensuring the protection of critical infrastructure, operations, and data. -Work closely with engineering, IT, and operations teams to integrate cybersecurity measures throughout the entire railway/metro infrastructure, from initial design to deployment and maintenance. -Develop and maintain an incident response plan, actively monitor network traffic and security logs, and respond promptly to any detected security breaches or anomalies.

Requirements

• cissp
• scada
• iso 27001
• 15+ years
• cloud security
• pen testing

What You Bring

-Extensive understanding of UAE data privacy regulations and their implications for transportation and infrastructure projects, including regulatory frameworks, transportation policies, and urban planning guidelines. -Skilled in reading, analyzing, and interpreting complex documents. -Professional certifications such as CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), CEH (Certified Ethical Hacker), or equivalent is highly desirable. -Adaptability to evolving cybersecurity threats and technologies in the context of large-scale transportation systems. -Extensive experience in securing networked systems and operational technology (OT) environments, such as SCADA, signaling systems, and train control systems. -Strong knowledge of cybersecurity frameworks and standards, including ISO 27001, NIST, IEC 62443, and GDPR compliance -15+ years of experience in cybersecurity, particularly in large-scale railway or metro projects. -Experience in cloud security and protecting digital services deployed in cloud environments is a plus. -Ability to interface effectively with all levels of the project team, clients, and other stakeholders. -Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (Master’s degree preferred). -Strong leadership and communication skills, capable of working with cross-functional teams and conveying complex security concepts to both technical and non-technical stakeholders. -Capable of responding effectively to sensitive inquiries or complaints. -Ability to handle high-pressure situations and respond quickly to security incidents or breaches. -Proficient in network security protocols (e.g., TCP/IP, VPNs, encryption), with experience in securing industrial control systems (ICS) and supervisory control and data acquisition (SCADA) system. -Effective oral and written communication skills for client presentations, technical reporting, and internal/external correspondence; ability to present information effectively to key stakeholders. -Excellent problem-solving and analytical skills to address complex cybersecurity challenges in critical infrastructure environments. -Understanding of the delivery process and construction management functions for large-scale projects. -Expertise in penetration testing, risk assessments, vulnerability scanning, and incident response for critical infrastructure. -Detail-oriented and proactive, with a strong sense of responsibility for securing vital infrastructure.

People Also Searched For

About Parsons Corporation

-Over decades it expanded into oil, petrochemical, water and infrastructure projects across the US and globally. -It leverages digital tools such as AI platforms, utility data systems, and drone integration alongside traditional design and construction. -Parsons completed high‑profile projects like major bridge, tunnel, and transit works. -Specializing in transportation, energy, environmental remediation, urban development, industrial, and cybersecurity projects. -The firm has delivered hundreds of mega‑projects worldwide, including infrastructure in the Middle East and environmental cleanup contracts.

Sector Specialisms