Analyzing Program security needs (including laws and regulations), determining security objectives and main security risks strategy
Planning security activities within development life cycle, estimating costs and duration, their impacts related to program execution, Identifying training needs
Responsible for Cost / Quality / Delay of Program Cybersecurity deliverables, as needed per Project / program context :
Cybersecurity context, and Cybersecurity Risk Analysis
Cybersecurity Architecture definition and requirement allocation
Cascading of requirement to suppliers, Manage Third Parties Risks,
Application of Cybersecurity Assurance Level
Definition of Cybersecurity Operating Procedures
Evaluation of the Project/Program achieved Cybersecurity level
Providing support during technical design meetings for cybersecurity activities
Obtaining agreement from Program/Customer about on the set of security measures to be implemented
Managing vulnerabilities and Cybersecurity issues and actions plan,
Managing Program Cybersecurity related communication,
Reporting on Program Cybersecurity status
In case of external Cybersecurity audit, managing the relationship with auditors Establish lessons learned
Promoting the Alstom Code of Ethics and adhering to the highest standards of ethical conduct