Jobs at CN – Senior Manager

Job Description:

At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely and our employees can focus on value-added tasks. You will be able to develop your skills and career in our close-knit, safety-focused culture working together as ONE TEAM. The careers we offer are meaningful because the work we do matters. Join us!

The purpose of this role is to establish an Operational Technology (OT) security practice, develop & mentor a team, and define cybersecurity reference architectures and standards for OT security at CN.

Job Responsibilities:

• Recognize employee milestones (service awards, retirements, etc.) as well as significant contributions and enhanced responsibilities
• Ensure knowledge is preserved through cross-training for key skill sets in the team (knowledge transfer)
• Focus on communications and foster collaboration by regularly providing updates to teams about ongoing initiatives and encouraging teams to work together to accomplish common goals and learning
• Manage employee performance by ensuring employees who are not meeting expectations are identified and supported through the performance improvement process
• Support employee development by having regular career conversations with all employees (documented and tracked) and supporting them in reaching their career goals
• Participate in succession planning by contributing to the yearly talent review cycle and identifying employees with the potential to move up the management and expertise paths
• Partner with HR to bring new talent to the organization by determining which skills and roles will be required in the future and by making thoughtful hiring decisions
• Create and enable a positive and engaging work environment by ensuring individual strengths are uncovered and leveraged through frequent and focused conversations – collaborate, coach and build connections with employees
• Provide a positive and welcoming onboarding experience to all new employees by ensuring they have access to the tools and resources needed to fulfill the requirements of their job
• Collaborate with the CISO, cybersecurity team, portfolio managers, other architects, OT and I&T leadership to understand the business direction and consequent impact on the security posture
• Continuously monitor and evaluate the environment through self-assessments and independent security reviews. Enable management to identify deficiencies and inefficiencies and to initiate improvement actions though security roadmap and strategies
• Define the proper course of action and investment strategy by building business cases and security roadmaps
  Engage the OT security vendor ecosystem to understand capabilities, options for compensating controls and risk mitigations to facilitate the selection of partners that integrate with the overall architecture
• Ensure the full documentation of security designs, as built architectures and operational processes through clear diagrams and well-written documents
• Direct and put in place the proper sets of OT security architecture controls to manage safety and security risk while enabling the business for technology systems such as: service-oriented-architectures; cloud technologies and containers; advanced analytics; AI; Industrial IoT; automation; networking infrastructure; mobile technologies; etc.
• Maintain and build relevant, current, valid and reliable team knowledge related to OT security architecture
• Ensure the OT security architecture is maintainable, sustainable and properly documented
• Advance security team accomplishments and competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members
• Drive key decisions involving OT security architecture and technologies

Job Requirements:

• Deep knowledge of security foundations: cryptography, Root of Trust, security models, etc. (asset)
• Expert knowledge of the processes, methodologies, tools and techniques, used for building large information technology system
• Expert knowledge of the technologies and architecture principles required to build complex operational technology systems such as: Programmable Logic Controllers (PLCs); Supervisory Control and Data Acquisition (SCADA); Distributed Control Systems (DCS); Human Machine Interface (HMI); Industrial network ports and protocols (such as TCP/IP, UDP, DNP3, Modbus, IEC 61850, PROFINET, OPC, LonWorks, DALI, BACnet, KNX, EnOcean, etc.); etc;
• Knowledge of standards, regulations and legislation governing Information Security, e.g. NIST, ISO 27001, OWASP
• Significant and proven experience in applying a structured approach to problem resolution in large, geographically dispersed organizations with 24/7 operations
• Detail-oriented self-starter with a high level of commitment and personal motivation
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures
• Demonstrated capability to understand the security implications of complex business operations and how they are linked to technological solutions that provide practical risk mitigation and business enablement
• Ability to define and organise an architecture security apparatus in reusable building blocks: patterns, services, components, capability models, etc.
• In depth understanding of infrastructure and network architecture and design, LAN/WAN implementation, and Windows/Linux environments (asset)
• Deep understanding of network protocols and standard approaches for network segmentation in OT or ICS environments
• Deep understanding of ICS design considerations with emphasis on human safety and the availability/security of operating environment as well as threats, vulnerabilities, and exploits in ICS environments and appropriate mitigation techniques.
• Knowledge of general IT security architecture and technologies including: service-oriented-architectures; mobile technologies; data-centric design; cloud technologies and containers; advanced analytics; AI; Identity and Access Management, Digital Forensics, End Point Encryption, Encryption Key Management, Database Security, Enterprise Directory Services, Application Firewall, Enterprise Password Vaults , Cloud SaaS /PaaS/IaaS Security, SIEM, etc. (asset)
• Knack for prioritizing tasks and working in a fast-paced environment
• Excellent written and verbal communication skills as well as business acumen
  Ability to derive security requirements from vaguely formulated business needs

Qualification & Experience:

• Architecture related certifications (TOGAF, Zachman, CISSP-ISSAP etc.) preferred
• Railroad, transportation, or other global industrial experience
• Minimum 5 years experience in OT or ICS security architecture
• Master’s degree in related field preferred
• Experience with Agile methodology (asset)
• At least one recognized OT security certification: e.g. Certified Information Systems Security Professional (CISSP), Global Industrial Cyber Security Professional (GICSP), ISA/IEC 62443 Cybersecurity Expert, etc.
• Virtual appliance configuration experience (asset)
• Minimum 15 years overall IT, OT or Industrial Control System (ICS) experience
• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, System Analysis or other relevant field
• Minimum 10 years experience in OT or ICS security
• Experience supervising and mentoring others is highly preferred (asset)

Job Details:

Company: CN Rail

Vacancy Type:  Full Time

Job Location: Calgary, AB, CA

Application Deadline: N/A

Apply Here

careers-trivia.net