Responsibilities

PRIMARY PURPOSE

Applies a senior level of technical system security expertise on SkyTrain operational network, systems and assets. Leads design, architecture and process reviews, assesses and mitigates associated risks, and improves the efficiency, reliability and safety of systems in support of SkyTrain system operation and maintenance.

KEY ACCOUNTABILITY

Participates in the establishment and refinement of departmental policies, procedures, processes, standards and strategy on security programs and makes recommendations adhering to American Public Transportation Association (APTA) standards. Determines courses of action within APTA standards, departmental procedures, policy guidelines and legislative requirements.

Assesses the infrastructure and applications of Train Operations Systems to address security needs ensuring adherence, identifying risks and proposing solutions. Conducts security audits, research and investigations on all Train Operations security violations.

Leads system security design and architecture for Train Operations Systems. Researches, evaluates and recommends new security products, technologies, services and practices. Identifies potential obsolescence and changes necessary to accommodate new technologies and best practices, enhancing system security for the SkyTrain operational network and assets.

Leads the root cause analysis and process reviews of system security issues and inefficiencies. Assesses potential threats. Provides interpretations and recommendations for corrective action, incorporating secure-by-design principles.





Develops reports and analysis to support management decision-making and presentations.

Implements and maintains security assessments and reporting systems, audit log tracking and information capturing requirements used in the delivery of service activities, ensuring data integrity.

Provides subject matter expertise and technical support related to system security and technology in supporting of systems assets and BCRTC systems capital projects.

Forms solid partnerships and engages with technology teams across the organization to build alignment on key projects and initiatives and develop strategy and cyber architecture execution roadmaps.

Manages vendor engagement including evaluating products, proof of concept and pricing, and discusses with internal stakeholders to ensure that potential additions do not have negative impacts.

Maintains up-to-date knowledge of security threats, countermeasures, security tools, and network technologies.

Supports the Systems Manager as required, including providing security architectures, product evaluations and scoring and departmental suggestions based on industry best practice standards and practices.

Manages staff including selection, motivation, coaching,



performance management and training and development.

Qualifications

EDUCATION & EXPERIENCE:

The competencies of this position would be acquired through completion of a University degree in Computer Science or equivalent discipline plus six (6) years of experience in system security and enterprise architectural design, including implementation methodologies, threat modeling, security control design analysis and crating security requirements and controls. CISSP and SANS Certifications are required.

OTHER REQUIREMENTS

Working knowledge of railway operation and maintenance practices, including configuration control.

Solid knowledge of the relevant standards, legislation, acts and regulatory requirements pertaining to Security Systems.

Ability to produce technical reports, standards, procedures, specifications, method statements, risk assessments, FMECA, schematic and or technical drawings.

Advanced analytical thinking and problem-solving skills, to resolve critical and high impact issues.

Solid time and project management skills to balance and coordinate effort across multiple, concurrent activities.

Solid communication and interpersonal skills to build and maintain relationships with multiple internal and external stakeholders, with the ability to achieve consensus between groups.

Must be able to balance Security with operational needs, considerations, and availability.

Experience in the automatic control rail transportation industry is preferred.

📌 Sr OT Cybersecurity Advisor (Vancouver)
🏢 British Columbia Rapid Transit
📍 Vancouver