Lediga job som Incident Manager

Req ID:508384

Interested in protecting the technology that keeps millions of people moving?

Behind every train journey is a complex ecosystem of signalling systems, rolling stock and digital technologies working together to keep passengers and goods moving safely and efficiently.

At Alstom, cybersecurity is an essential part of delivering safe, reliable and resilient transportation systems.

As a Project Cybersecurity Manager,

you'll help secure critical railway solutions across the Nordics, ensuring cybersecurity is embedded into projects from design and development through deployment and customer handover.

This role can be based in Stockholm, Västerås, Göteborg or Hässleholm, with a hybrid way of working and an expectation of three days per week in the office.

Your future role

You'll act as the cybersecurity authority within assigned railway projects, working closely with engineering teams, customers, suppliers and project leadership to deliver secure and compliant solutions across rolling stock, signalling and rail services.

What you'll do

• Lead cybersecurity activities throughout the lifecycle of complex railway projects.
• Drive cybersecurity risk assessments, threat analysis and mitigation planning across IT and OT environments.
• Ensure compliance with industry standards including IEC 62443, TS 50701 and customer requirements.
• Collaborate with customers, suppliers and multidisciplinary engineering teams to deliver secure and resilient solutions.
• Support project decisions, reviews and audits by providing cybersecurity expertise and guidance.

What you bring

• Experience in OT Cybersecurity, Industrial Control Systems (ICS), Critical Infrastructure, Transportation or industrial environments.
• Knowledge of cybersecurity risk assessments, threat modelling, security architecture and vulnerability management.
• Understanding of IEC 62443, TS 50701 or similar cybersecurity frameworks.
• Experience working in engineering, project delivery or customer-facing environments.
• Strong communication skills and the ability to influence technical and non-technical stakeholders.
• Ability to work across multiple disciplines, suppliers and customer organizations.
• Fluent English.

Nice to have: Railway, signalling, ERTMS, ETCS, CBTC or rolling stock experience, safety-critical systems experience, supplier cybersecurity management, TS 50701 knowledge.

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Electronics, Telecommunications, Systems Engineering or similar.

Certifications: IEC 62443, CISSP, GICSP, CISM, CISA or equivalent.

Why you'll enjoy working with us

• Protect critical transportation infrastructure used by millions of passengers every day.
• Work with cutting-edge railway technologies and industry-leading cybersecurity standards.
• Collaborate with international teams across engineering, safety, quality and project delivery.
• Enjoy a hybrid working model that supports flexibility and work-life balance.
• Grow your career in a global organisation with opportunities across projects, technologies and countries.

Important to note

As a global business, we're an equal-opportunity employer that celebrates diversity across the 70+ countries where we operate. We are committed to creating an inclusive workplace where everyone can thrive.

If you're excited about this role but don't meet every single requirement, we still encourage you to apply. We'd love to hear about your experience and explore how you could contribute to our team.

Req ID:508384

Interested in protecting the technology that keeps millions of people moving?

Behind every train journey is a complex ecosystem of signalling systems, rolling stock and digital technologies working together to keep passengers and goods moving safely and efficiently.

At Alstom, cybersecurity is an essential part of delivering safe, reliable and resilient transportation systems.

As a Project Cybersecurity Manager,

you'll help secure critical railway solutions across the Nordics, ensuring cybersecurity is embedded into projects from design and development through deployment and customer handover.

This role can be based in Stockholm, Västerås, Göteborg or Hässleholm, with a hybrid way of working and an expectation of three days per week in the office.

Your future role

You'll act as the cybersecurity authority within assigned railway projects, working closely with engineering teams, customers, suppliers and project leadership to deliver secure and compliant solutions across rolling stock, signalling and rail services.

What you'll do

• Lead cybersecurity activities throughout the lifecycle of complex railway projects.
• Drive cybersecurity risk assessments, threat analysis and mitigation planning across IT and OT environments.
• Ensure compliance with industry standards including IEC 62443, TS 50701 and customer requirements.
• Collaborate with customers, suppliers and multidisciplinary engineering teams to deliver secure and resilient solutions.
• Support project decisions, reviews and audits by providing cybersecurity expertise and guidance.

What you bring

• Experience in OT Cybersecurity, Industrial Control Systems (ICS), Critical Infrastructure, Transportation or industrial environments.
• Knowledge of cybersecurity risk assessments, threat modelling, security architecture and vulnerability management.
• Understanding of IEC 62443, TS 50701 or similar cybersecurity frameworks.
• Experience working in engineering, project delivery or customer-facing environments.
• Strong communication skills and the ability to influence technical and non-technical stakeholders.
• Ability to work across multiple disciplines, suppliers and customer organizations.
• Fluent English.

Nice to have: Railway, signalling, ERTMS, ETCS, CBTC or rolling stock experience, safety-critical systems experience, supplier cybersecurity management, TS 50701 knowledge.

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Electronics, Telecommunications, Systems Engineering or similar.

Certifications: IEC 62443, CISSP, GICSP, CISM, CISA or equivalent.

Why you'll enjoy working with us

• Protect critical transportation infrastructure used by millions of passengers every day.
• Work with cutting-edge railway technologies and industry-leading cybersecurity standards.
• Collaborate with international teams across engineering, safety, quality and project delivery.
• Enjoy a hybrid working model that supports flexibility and work-life balance.
• Grow your career in a global organisation with opportunities across projects, technologies and countries.

Important to note

As a global business, we're an equal-opportunity employer that celebrates diversity across the 70+ countries where we operate. We are committed to creating an inclusive workplace where everyone can thrive.

If you're excited about this role but don't meet every single requirement, we still encourage you to apply. We'd love to hear about your experience and explore how you could contribute to our team.

Req ID:508384

Interested in protecting the technology that keeps millions of people moving?

Behind every train journey is a complex ecosystem of signalling systems, rolling stock and digital technologies working together to keep passengers and goods moving safely and efficiently.

At Alstom, cybersecurity is an essential part of delivering safe, reliable and resilient transportation systems.

As a Project Cybersecurity Manager,

you'll help secure critical railway solutions across the Nordics, ensuring cybersecurity is embedded into projects from design and development through deployment and customer handover.

This role can be based in Stockholm, Västerås, Göteborg or Hässleholm, with a hybrid way of working and an expectation of three days per week in the office.

Your future role

You'll act as the cybersecurity authority within assigned railway projects, working closely with engineering teams, customers, suppliers and project leadership to deliver secure and compliant solutions across rolling stock, signalling and rail services.

What you'll do

• Lead cybersecurity activities throughout the lifecycle of complex railway projects.
• Drive cybersecurity risk assessments, threat analysis and mitigation planning across IT and OT environments.
• Ensure compliance with industry standards including IEC 62443, TS 50701 and customer requirements.
• Collaborate with customers, suppliers and multidisciplinary engineering teams to deliver secure and resilient solutions.
• Support project decisions, reviews and audits by providing cybersecurity expertise and guidance.

What you bring

• Experience in OT Cybersecurity, Industrial Control Systems (ICS), Critical Infrastructure, Transportation or industrial environments.
• Knowledge of cybersecurity risk assessments, threat modelling, security architecture and vulnerability management.
• Understanding of IEC 62443, TS 50701 or similar cybersecurity frameworks.
• Experience working in engineering, project delivery or customer-facing environments.
• Strong communication skills and the ability to influence technical and non-technical stakeholders.
• Ability to work across multiple disciplines, suppliers and customer organizations.
• Fluent English.

Nice to have: Railway, signalling, ERTMS, ETCS, CBTC or rolling stock experience, safety-critical systems experience, supplier cybersecurity management, TS 50701 knowledge.

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Electronics, Telecommunications, Systems Engineering or similar.

Certifications: IEC 62443, CISSP, GICSP, CISM, CISA or equivalent.

Why you'll enjoy working with us

• Protect critical transportation infrastructure used by millions of passengers every day.
• Work with cutting-edge railway technologies and industry-leading cybersecurity standards.
• Collaborate with international teams across engineering, safety, quality and project delivery.
• Enjoy a hybrid working model that supports flexibility and work-life balance.
• Grow your career in a global organisation with opportunities across projects, technologies and countries.

Important to note

As a global business, we're an equal-opportunity employer that celebrates diversity across the 70+ countries where we operate. We are committed to creating an inclusive workplace where everyone can thrive.

If you're excited about this role but don't meet every single requirement, we still encourage you to apply. We'd love to hear about your experience and explore how you could contribute to our team.

Req ID:508384

Interested in protecting the technology that keeps millions of people moving?

Behind every train journey is a complex ecosystem of signalling systems, rolling stock and digital technologies working together to keep passengers and goods moving safely and efficiently.

At Alstom, cybersecurity is an essential part of delivering safe, reliable and resilient transportation systems.

As a Project Cybersecurity Manager,

you'll help secure critical railway solutions across the Nordics, ensuring cybersecurity is embedded into projects from design and development through deployment and customer handover.

This role can be based in Stockholm, Västerås, Göteborg or Hässleholm, with a hybrid way of working and an expectation of three days per week in the office.

Your future role

You'll act as the cybersecurity authority within assigned railway projects, working closely with engineering teams, customers, suppliers and project leadership to deliver secure and compliant solutions across rolling stock, signalling and rail services.

What you'll do

• Lead cybersecurity activities throughout the lifecycle of complex railway projects.
• Drive cybersecurity risk assessments, threat analysis and mitigation planning across IT and OT environments.
• Ensure compliance with industry standards including IEC 62443, TS 50701 and customer requirements.
• Collaborate with customers, suppliers and multidisciplinary engineering teams to deliver secure and resilient solutions.
• Support project decisions, reviews and audits by providing cybersecurity expertise and guidance.

What you bring

• Experience in OT Cybersecurity, Industrial Control Systems (ICS), Critical Infrastructure, Transportation or industrial environments.
• Knowledge of cybersecurity risk assessments, threat modelling, security architecture and vulnerability management.
• Understanding of IEC 62443, TS 50701 or similar cybersecurity frameworks.
• Experience working in engineering, project delivery or customer-facing environments.
• Strong communication skills and the ability to influence technical and non-technical stakeholders.
• Ability to work across multiple disciplines, suppliers and customer organizations.
• Fluent English.

Nice to have: Railway, signalling, ERTMS, ETCS, CBTC or rolling stock experience, safety-critical systems experience, supplier cybersecurity management, TS 50701 knowledge.

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Electronics, Telecommunications, Systems Engineering or similar.

Certifications: IEC 62443, CISSP, GICSP, CISM, CISA or equivalent.

Why you'll enjoy working with us

• Protect critical transportation infrastructure used by millions of passengers every day.
• Work with cutting-edge railway technologies and industry-leading cybersecurity standards.
• Collaborate with international teams across engineering, safety, quality and project delivery.
• Enjoy a hybrid working model that supports flexibility and work-life balance.
• Grow your career in a global organisation with opportunities across projects, technologies and countries.

Important to note

As a global business, we're an equal-opportunity employer that celebrates diversity across the 70+ countries where we operate. We are committed to creating an inclusive workplace where everyone can thrive.

If you're excited about this role but don't meet every single requirement, we still encourage you to apply. We'd love to hear about your experience and explore how you could contribute to our team.

Req ID:508384

Interested in protecting the technology that keeps millions of people moving?

Behind every train journey is a complex ecosystem of signalling systems, rolling stock and digital technologies working together to keep passengers and goods moving safely and efficiently.

At Alstom, cybersecurity is an essential part of delivering safe, reliable and resilient transportation systems.

As a Project Cybersecurity Manager,

you'll help secure critical railway solutions across the Nordics, ensuring cybersecurity is embedded into projects from design and development through deployment and customer handover.

This role can be based in Stockholm, Västerås, Göteborg or Hässleholm, with a hybrid way of working and an expectation of three days per week in the office.

Your future role

You'll act as the cybersecurity authority within assigned railway projects, working closely with engineering teams, customers, suppliers and project leadership to deliver secure and compliant solutions across rolling stock, signalling and rail services.

What you'll do

• Lead cybersecurity activities throughout the lifecycle of complex railway projects.
• Drive cybersecurity risk assessments, threat analysis and mitigation planning across IT and OT environments.
• Ensure compliance with industry standards including IEC 62443, TS 50701 and customer requirements.
• Collaborate with customers, suppliers and multidisciplinary engineering teams to deliver secure and resilient solutions.
• Support project decisions, reviews and audits by providing cybersecurity expertise and guidance.

What you bring

• Experience in OT Cybersecurity, Industrial Control Systems (ICS), Critical Infrastructure, Transportation or industrial environments.
• Knowledge of cybersecurity risk assessments, threat modelling, security architecture and vulnerability management.
• Understanding of IEC 62443, TS 50701 or similar cybersecurity frameworks.
• Experience working in engineering, project delivery or customer-facing environments.
• Strong communication skills and the ability to influence technical and non-technical stakeholders.
• Ability to work across multiple disciplines, suppliers and customer organizations.
• Fluent English.

Nice to have: Railway, signalling, ERTMS, ETCS, CBTC or rolling stock experience, safety-critical systems experience, supplier cybersecurity management, TS 50701 knowledge.

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Electronics, Telecommunications, Systems Engineering or similar.

Certifications: IEC 62443, CISSP, GICSP, CISM, CISA or equivalent.

Why you'll enjoy working with us

• Protect critical transportation infrastructure used by millions of passengers every day.
• Work with cutting-edge railway technologies and industry-leading cybersecurity standards.
• Collaborate with international teams across engineering, safety, quality and project delivery.
• Enjoy a hybrid working model that supports flexibility and work-life balance.
• Grow your career in a global organisation with opportunities across projects, technologies and countries.

Important to note

As a global business, we're an equal-opportunity employer that celebrates diversity across the 70+ countries where we operate. We are committed to creating an inclusive workplace where everyone can thrive.

If you're excited about this role but don't meet every single requirement, we still encourage you to apply. We'd love to hear about your experience and explore how you could contribute to our team.

Req ID:508384

Interested in protecting the technology that keeps millions of people moving?

Behind every train journey is a complex ecosystem of signalling systems, rolling stock and digital technologies working together to keep passengers and goods moving safely and efficiently.

At Alstom, cybersecurity is an essential part of delivering safe, reliable and resilient transportation systems.

As a Project Cybersecurity Manager,

you'll help secure critical railway solutions across the Nordics, ensuring cybersecurity is embedded into projects from design and development through deployment and customer handover.

This role can be based in Stockholm, Västerås, Göteborg or Hässleholm, with a hybrid way of working and an expectation of three days per week in the office.

Your future role

You'll act as the cybersecurity authority within assigned railway projects, working closely with engineering teams, customers, suppliers and project leadership to deliver secure and compliant solutions across rolling stock, signalling and rail services.

What you'll do

• Lead cybersecurity activities throughout the lifecycle of complex railway projects.
• Drive cybersecurity risk assessments, threat analysis and mitigation planning across IT and OT environments.
• Ensure compliance with industry standards including IEC 62443, TS 50701 and customer requirements.
• Collaborate with customers, suppliers and multidisciplinary engineering teams to deliver secure and resilient solutions.
• Support project decisions, reviews and audits by providing cybersecurity expertise and guidance.

What you bring

• Experience in OT Cybersecurity, Industrial Control Systems (ICS), Critical Infrastructure, Transportation or industrial environments.
• Knowledge of cybersecurity risk assessments, threat modelling, security architecture and vulnerability management.
• Understanding of IEC 62443, TS 50701 or similar cybersecurity frameworks.
• Experience working in engineering, project delivery or customer-facing environments.
• Strong communication skills and the ability to influence technical and non-technical stakeholders.
• Ability to work across multiple disciplines, suppliers and customer organizations.
• Fluent English.

Nice to have: Railway, signalling, ERTMS, ETCS, CBTC or rolling stock experience, safety-critical systems experience, supplier cybersecurity management, TS 50701 knowledge.

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Electronics, Telecommunications, Systems Engineering or similar.

Certifications: IEC 62443, CISSP, GICSP, CISM, CISA or equivalent.

Why you'll enjoy working with us

• Protect critical transportation infrastructure used by millions of passengers every day.
• Work with cutting-edge railway technologies and industry-leading cybersecurity standards.
• Collaborate with international teams across engineering, safety, quality and project delivery.
• Enjoy a hybrid working model that supports flexibility and work-life balance.
• Grow your career in a global organisation with opportunities across projects, technologies and countries.

Important to note

As a global business, we're an equal-opportunity employer that celebrates diversity across the 70+ countries where we operate. We are committed to creating an inclusive workplace where everyone can thrive.

If you're excited about this role but don't meet every single requirement, we still encourage you to apply. We'd love to hear about your experience and explore how you could contribute to our team.

Req ID:508384

Interested in protecting the technology that keeps millions of people moving?

Behind every train journey is a complex ecosystem of signalling systems, rolling stock and digital technologies working together to keep passengers and goods moving safely and efficiently.

At Alstom, cybersecurity is an essential part of delivering safe, reliable and resilient transportation systems.

As a Project Cybersecurity Manager,

you'll help secure critical railway solutions across the Nordics, ensuring cybersecurity is embedded into projects from design and development through deployment and customer handover.

This role can be based in Stockholm, Västerås, Göteborg or Hässleholm, with a hybrid way of working and an expectation of three days per week in the office.

Your future role

You'll act as the cybersecurity authority within assigned railway projects, working closely with engineering teams, customers, suppliers and project leadership to deliver secure and compliant solutions across rolling stock, signalling and rail services.

What you'll do

• Lead cybersecurity activities throughout the lifecycle of complex railway projects.
• Drive cybersecurity risk assessments, threat analysis and mitigation planning across IT and OT environments.
• Ensure compliance with industry standards including IEC 62443, TS 50701 and customer requirements.
• Collaborate with customers, suppliers and multidisciplinary engineering teams to deliver secure and resilient solutions.
• Support project decisions, reviews and audits by providing cybersecurity expertise and guidance.

What you bring

• Experience in OT Cybersecurity, Industrial Control Systems (ICS), Critical Infrastructure, Transportation or industrial environments.
• Knowledge of cybersecurity risk assessments, threat modelling, security architecture and vulnerability management.
• Understanding of IEC 62443, TS 50701 or similar cybersecurity frameworks.
• Experience working in engineering, project delivery or customer-facing environments.
• Strong communication skills and the ability to influence technical and non-technical stakeholders.
• Ability to work across multiple disciplines, suppliers and customer organizations.
• Fluent English.

Nice to have: Railway, signalling, ERTMS, ETCS, CBTC or rolling stock experience, safety-critical systems experience, supplier cybersecurity management, TS 50701 knowledge.

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Electronics, Telecommunications, Systems Engineering or similar.

Certifications: IEC 62443, CISSP, GICSP, CISM, CISA or equivalent.

Why you'll enjoy working with us

• Protect critical transportation infrastructure used by millions of passengers every day.
• Work with cutting-edge railway technologies and industry-leading cybersecurity standards.
• Collaborate with international teams across engineering, safety, quality and project delivery.
• Enjoy a hybrid working model that supports flexibility and work-life balance.
• Grow your career in a global organisation with opportunities across projects, technologies and countries.

Important to note

As a global business, we're an equal-opportunity employer that celebrates diversity across the 70+ countries where we operate. We are committed to creating an inclusive workplace where everyone can thrive.

If you're excited about this role but don't meet every single requirement, we still encourage you to apply. We'd love to hear about your experience and explore how you could contribute to our team.

About the assignment

We are looking for an experienced security operations leader to step in as interim Cyber Defence Lead for a global manufacturing company, covering for the regular manager during a planned leave. You will keep security operations running smoothly, lead the response when something serious happens, and strengthen how the team detects and follows up on threats.

• Location: Stockholm, with remote work possible (up to 100%)

• Start: 26 October 2026 (we are looking to fill this as soon as possible)

• End: 31 August 2027

• Scope: Full time (100%)

• Working language: English

What you'll be doing

• Leading and coordinating the security operations function (SOC) day to day

• Owning incident management and threat follow-up from detection to closure

• Helping lead P1 and major incidents when needed, sometimes outside office hours

• Improving mean time to respond and recover (MTTR) and widening monitoring and detection coverage

• Making sure incidents, threats, vulnerabilities and agreed actions are followed up on time

• Coordinating with internal teams and external service providers, acting as the subject matter expert

• Turning technical findings into clear actions and reporting for managers and stakeholders

What we're looking for

• A strong background in SOC operations, incident response and cyber defence, with experience leading or coordinating a team

• Hands-on experience with Microsoft Defender XDR, Microsoft Sentinel and Palo Alto (for example Cortex), or comparable enterprise XDR/SIEM platforms

• Experience with vulnerability management and security monitoring

• Understanding of modern identity risks, including privileged and non-human identities

• Strong communication and stakeholder skills, and fluent English

• A calm, structured and proactive approach under pressure

Nice to have

• Experience from global or regulated organisations

• Automation of triage and response

• Certifications such as GCIH, GCIA or CISSP

Interested? Apply as soon as possible, as we review applications on a rolling basis and the assignment starts shortly.

About the assignment

We are looking for an experienced security operations leader to step in as interim Cyber Defence Lead for a global manufacturing company, covering for the regular manager during a planned leave. You will keep security operations running smoothly, lead the response when something serious happens, and strengthen how the team detects and follows up on threats.

• Location: Stockholm, with remote work possible (up to 100%)

• Start: 26 October 2026 (we are looking to fill this as soon as possible)

• End: 31 August 2027

• Scope: Full time (100%)

• Working language: English

What you'll be doing

• Leading and coordinating the security operations function (SOC) day to day

• Owning incident management and threat follow-up from detection to closure

• Helping lead P1 and major incidents when needed, sometimes outside office hours

• Improving mean time to respond and recover (MTTR) and widening monitoring and detection coverage

• Making sure incidents, threats, vulnerabilities and agreed actions are followed up on time

• Coordinating with internal teams and external service providers, acting as the subject matter expert

• Turning technical findings into clear actions and reporting for managers and stakeholders

What we're looking for

• A strong background in SOC operations, incident response and cyber defence, with experience leading or coordinating a team

• Hands-on experience with Microsoft Defender XDR, Microsoft Sentinel and Palo Alto (for example Cortex), or comparable enterprise XDR/SIEM platforms

• Experience with vulnerability management and security monitoring

• Understanding of modern identity risks, including privileged and non-human identities

• Strong communication and stakeholder skills, and fluent English

• A calm, structured and proactive approach under pressure

Nice to have

• Experience from global or regulated organisations

• Automation of triage and response

• Certifications such as GCIH, GCIA or CISSP

Interested? Apply as soon as possible, as we review applications on a rolling basis and the assignment starts shortly.

About the assignment

We are looking for an experienced security operations leader to step in as interim Cyber Defence Lead for a global manufacturing company, covering for the regular manager during a planned leave. You will keep security operations running smoothly, lead the response when something serious happens, and strengthen how the team detects and follows up on threats.

• Location: Stockholm, with remote work possible (up to 100%)

• Start: 26 October 2026 (we are looking to fill this as soon as possible)

• End: 31 August 2027

• Scope: Full time (100%)

• Working language: English

What you'll be doing

• Leading and coordinating the security operations function (SOC) day to day

• Owning incident management and threat follow-up from detection to closure

• Helping lead P1 and major incidents when needed, sometimes outside office hours

• Improving mean time to respond and recover (MTTR) and widening monitoring and detection coverage

• Making sure incidents, threats, vulnerabilities and agreed actions are followed up on time

• Coordinating with internal teams and external service providers, acting as the subject matter expert

• Turning technical findings into clear actions and reporting for managers and stakeholders

What we're looking for

• A strong background in SOC operations, incident response and cyber defence, with experience leading or coordinating a team

• Hands-on experience with Microsoft Defender XDR, Microsoft Sentinel and Palo Alto (for example Cortex), or comparable enterprise XDR/SIEM platforms

• Experience with vulnerability management and security monitoring

• Understanding of modern identity risks, including privileged and non-human identities

• Strong communication and stakeholder skills, and fluent English

• A calm, structured and proactive approach under pressure

Nice to have

• Experience from global or regulated organisations

• Automation of triage and response

• Certifications such as GCIH, GCIA or CISSP

Interested? Apply as soon as possible, as we review applications on a rolling basis and the assignment starts shortly.