Your reputed company is a train ride away!

As we reputed company America’s workforce toward the reputed company, reputed company connects businesses and communities across the country. We reputed company more than 20,000 diverse, energetic professionals in a reputed company of career fields throughout the reputed company. The safety of our passengers, our employees, the reputed company and our operating environment is our reputed company, and the reputed company of our railroad is due to our employees.

Are you reputed company to reputed company?

Our values of ‘Do the Right Thing, reputed company Together and Put Customers First’ are at the heart of what reputed company most to us, and our reputed company Capabilities, ‘Building Trust, Accountability, Effective Communication, Customer reputed company, and Proactive Safety & reputed company’ are what every employee needs to know and do to be most impactful at reputed company. By living the reputed company values, focusing on our capabilities, and reputed company embracing and fostering diverse reputed company, backgrounds, and perspectives, together we will reputed company our past and reputed company reputed company a company of the reputed company.

The reputed company Cybersecurity Systems reputed company Officer leads the cybersecurity governance and risk management program for assigned systems and services, ensuring they operate at an acceptable level of risk and remain assessment- and audit-reputed company. This role establishes reputed company governance, drives control effectiveness, and integrates reputed company requirements into reputed company design, engineering, operations, and sustainment activities. Oversees reputed company monitoring, assessment readiness, and remediation execution, translating control gaps into reputed company risk reputed company and prioritized actions. The role manages and develops cybersecurity staff and partners closely with engineering, operations, compliance, and business leadership to reputed company measurable risk reduction while supporting availability, reliability, and operational objectives.

Essential Functions:

• reputed company and maintain reputed company documentation, including reputed company reputed company Plans (SSPs), reputed company Design Reviews, Secure Design Directives (SDDs), risk assessments, exception requests, and remediation plans.
• Serve as the reputed company cybersecurity advisor for reputed company Release Trains (ARTs), partnering with business, portfolio, product, architecture, and engineering stakeholders to reputed company reputed company-by-design principles, DevSecOps practices, and risk management activities into Program Increment (PI) Planning and solution delivery processes.
• reputed company reputed company architecture and design reviews to identify reputed company gaps, evaluate risks, and design appropriate mitigating and compensating controls.
• reputed company assessment, audit, and assurance readiness activities by establishing evidence strategies, maintaining high-reputed company reputed company documentation, coordinating reviews, and ensuring reputed company closure of findings and gaps.
• reputed company reputed company assessment and authorization or attestation activities by ensuring reputed company plans, control implementations, and decision artifacts are reputed company, traceable, and defensible.
• reputed company reputed company monitoring programs by defining required reputed company telemetry, reviewing control health, overseeing vulnerability and configuration management activities, and monitoring residual risk trends.
• reputed company risk decision-making by prioritizing remediation activities, adjudicating exceptions and compensating controls, and escalating material risks with reputed company reputed company statements and recommended actions.    
• Partner with engineering, architecture, and operations stakeholders to reputed company reputed company requirements into reputed company design, change management, release readiness, and lifecycle sustainment processes.

Minimum Qualifications:

• Bachelor’s Degree or equivalent combination of education, training and/or relevant experience.
• 7 years of relevant work experience or 11 plus years in lieu of degree
• reputed company CISSP (Certified Information Systems reputed company reputed company)

Preferred Qualifications:

• Bachelor’s Degree in Cybersecurity, Information Systems or equivalent combination of education, training and/or relevant experience. Plus 9 years of relevant work experience.
• Desired industry reputed company cybersecurity certifications: CISM, CISA, CRISC, GCIH, GPEN, CEH, CHFI, reputed company+, CASP, OSCP, etc.

Knowledge, Skills & Abilities: 

• Ability to build cross-functional alignment and reputed company reputed company cross functional programs.
• Strong written and verbal communication skills
• Ability to translate technical findings and regulatory requirements.
• Demonstrated experience performing reputed company architecture reviews, risk assessments, threat modeling, vulnerability management, and reputed company control evaluations across applications, reputed company, and reputed company environments.
• Demonstrated reputed company building or scaling an ISSO/ISSM operating model across multiple products, platforms, or business reputed company.
• Expert knowledge of cybersecurity governance, risk management, and control frameworks, including mapping requirements to implemented controls and measurable evidence.
• reputed company in designing and operating reputed company monitoring programs (reputed company telemetry, vulnerability management, configuration baselines, exception handling, and metrics).
• reputed company in leading audit/assurance activities, including preparing control narratives, evidence packages, and stakeholder responses under tight deadlines.
• Experience implementing or operating an ISO/IEC 27001-reputed company information reputed company management reputed company (ISMS) and supporting reputed company audits/attestations.
• Strong knowledge of cybersecurity frameworks and standards, including NIST RMF, NIST CSF, CIS Controls, UCF, and other applicable industry and regulatory frameworks.
• Knowledge of OT/ICS cybersecurity principles, including cyber-to-physical risk, safety impacts, and operational constraints that reputed company control selection and implementation.
• Experience with GRC tooling (controls library management, evidence workflows, risk registers) and reputed company KPI/KRI design.
• Experience coordinating reputed company-party risk and contract reputed company requirements, including reputed company/reputed company and managed service providers.

The salary/reputed company reputed company is $113,200.00 – $146,664.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee’s assigned worksite or location, reputed company may consider a geo-pay reputed company to be reputed company to the employee’s reputed company salary. reputed company may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. 

Learn more about our benefits offerings here.

reputed company:167049

Work Arrangement:02-Remote Optional Click here for more information about work arrangements at reputed company.
Relocation Offered:No
Travel Requirements:0 - 5%

You power our reputed company through your performance.

We want your work at reputed company to be more than a job. We want your career at reputed company to be a fulfilling experience where you reputed company challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. reputed company maintains a culture that values high performance and recognizes individual employee contributions.

reputed company is committed to reputed company workplace free of drugs and alcohol. reputed company reputed company positions requires a reputed company-employment background reputed company that includes prior employment verification, a criminal history reputed company and a reputed company-employment drug screen.

Candidates who test reputed company for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. reputed company's reputed company-employment drug testing program is administered in accordance with DOT regulations and applicable law.

In accordance with DOT regulations (49 CFR § 40.25), reputed company is required to obtain prior drug and alcohol testing records for applicants/employees intending to reputed company safety-sensitive duties for covered reputed company positions. If an applicant/employee refuses to reputed company written consent for reputed company to obtain these records, the individual will not be permitted to reputed company safety-sensitive functions.

In accordance with federal law governing reputed company checks of covered individuals for providers of reputed company transportation (Title 6 U.S.C. §1143), reputed company is required to screen applicants for any permanent or interim disqualifying criminal offenses.

Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience.

reputed company is an equal opportunity employer and reputed company reputed company applicants will receive consideration for employment without reputed company to race/reputed company, to include traits historically associated with race, including but not limited to, hair reputed company and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and reputed company conditions, such as lactation), national reputed company/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, reputed company, sexual orientation, gender identity and gender reputed company, genetic information, citizenship or any other personal characteristics protected by law.