Principal Consultant, Industrial OT Cybersecurity

The OpportunityWSP is currently seeking a Principal Consultant, Industrial / OT Cybersecurity to join our Cybersecurity Practice in Canada. This role aligns with WSP’s “Future Ready” vision to become the industry leader in digital engineering and advisory services. Our Industrial OT Cybersecurity Practice is formed of Engineers, Specialists, and Consultants who plan, design and implement strategies, frameworks and solutions to ensure the security of (CNI) critical national infrastructures. Our mission is to deliver digital infrastructures that are resilient and can be maintained as such throughout their life cycle. This is an opportunity to work with leading experts within the ICS/OT Cybersecurity Industry, build a cross-functional network of professionals, and work in a high-performing, flexible, fun and inclusive environment.We value inclusion and belonging and offer a flexible work policy, a collaborative culture, and opportunities for career growth across Canada. What you can expect to do hereProvide cybersecurity expertise and technical leadership for Industrial Control Systems (ICS) and Operational Technology (OT) environments.Act as the discipline lead for Industrial Cybersecurity within WSP major infrastructure projects, with a focus on the Rail & Transit domain.Lead the strategy and planning of all cyber security activities and resources needed for major infrastructure projects and / or focused client mandates, spanning feasibility studies, requirements management, design, procurement, implementation, testing and commissioning, into operations & maintenance.Define KPI’s for the project Cybersecurity framework and continually improve the discipline through real-world deployment.Oversee and execute WSP’s Cybersecurity project plans to ensure cyber resilience across governance, tools, policies, procedures, and people.Lead cyber security threat, vulnerability, and risk assessments by identifying critical assets, network connectivity and threat vectors to define mitigations and residual risk.Cascade cyber security requirements to suppliers and engage in procurement to manage cyber risk in the supply chain.Perform analysis to provide evidence for project requirements and verification of security controls through the V-cycle assurance process.Coordinate with engineering design, project management, and construction teams to ensure cyber security activities are implemented by the project team and suppliers.Review cyber security submissions from suppliers and designers and provide detailed technical comments.Plan, prepare and implement a cyber security testing strategy to validate resilience against external and internal threats.Manage client relationships and advise on actions to seize opportunities or mitigate risks.Deliver on critical path project activities and deliverables within allocated timescales to meet project deadlines.Identify opportunities for new work and contribute to bid materials and proposal exercises when appropriate. What you’ll bring to WSPTechnical qualifications, experience, and skillsNetworking, Telecommunications or Cybersecurity Engineering degree, or equivalentRelevant Cybersecurity training and certifications (e.g., GICSP, GIAC, IEC 62443 suite) or a master’s degree in Cybersecurity10 years minimum experience in areas such as: major infrastructure projects leadership; telecommunications/network technology/cloud; automation/SCADA/control systems; distributed control systems/OTIn-depth experience in Industrial Cyber Security from areas including OT Cybersecurity, vulnerability management, security architecture, and OT/ICS SecurityExperience in Rail & Transit sector for major multi-discipline projects or operationsExperience bridging technical, schedule, and commercial constraints at a project level in OT CybersecurityApplied knowledge of NIST guidelines, ISA/IEC 62443, ISO 2700x frameworks; fundamental understanding of IT/OT protocols (TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, etc.)IEC 62443, CISSP, CompTIA Security+, or SANS GICSP certification Interpersonal and soft skillsExcellent written and verbal communicationProficiency in Microsoft Office (Excel, Word, Visio, Project, Outlook)Ability to work effectively remotely within an extended teamAbility to understand responsibilities and be accountable for delivered workAbility to explain complex Engineering and Industrial Cybersecurity concepts to non-technical decision makersAbility to manage multiple mandates simultaneously What sets you apartExperience managing technical teams and overseeing workstreams at a project levelSpecific experience in Transportation OT Cybersecurity from a discipline lead perspectiveKnowledge of Systems Engineering and Systems Assurance concepts in Railway domains (e.g., EN 50126, 50701)International experience, such as European Rail Infrastructure and ProjectsProfessional Engineer (PEng) or Chartered Engineer (CEng) or working toward these accreditationsExperience as a Consultant or Advisor considering budgetary and cross-disciplinary constraintsHands-on experience with OT Cybersecurity asset discovery and vulnerability solutionsExperience in Cybersecurity or Networking project/program managementBilingual French/English is an asset About UsWSP is one of the world's leading professional services firms. Our purpose is to future proof our cities and environments. We have over 65,000 team members globally; in Canada, our 12,000+ people are involved in everything from environmental remediation to urban planning, from engineering iconic buildings to designing sustainable transportation networks, to developing renewable power sources for the future.At WSP:We value our people and our reputationWe are locally dedicated with international scaleWe are future focused and challenge the status quoWe foster collaboration in everything we doWe have an empowered culture and hold ourselves accountablePlease Note: Health and Safety is a core paramount value of WSP. Accommodations are available on request for candidates taking part in all aspects of the selection process. WSP is committed to employment equity and does not accept unsolicited resumes from agencies. Legal and CorporateSeniority level: Mid-Senior levelEmployment type: Full-timeJob function: Information TechnologyIndustries: Professional Services Referrals increase your chances of interviewing at WSP in Canada. Get notified about new Cyber Security Consultant jobs in Toronto, Ontario, Canada. #J-18808-Ljbffr