Cybersecurity Advisor - OT/IT

• Minimum of 8 years of experience in cybersecurity, with a focus on OT/industrial, railway, and/or automotive environments, as well as IT.
• Demonstrable experience in cybersecurity consulting and regulatory compliance in regulated environments.
• Experience participating in Cyber Resilience Act (CRA) compliance projects.
• Review and validation of technical documentation within the certification and authorization framework.
• Leadership capacity, client communication, and strategic vision.
• High level of English. Good level of French is valued.

• Experience in consulting and application of railway and automotive regulations.
• Participation in railway projects ensuring compliance with Cyber Security requirements.
• Experience in coordination with railway regulatory bodies and processes, such as:
  • European Union Agency for Railways (ERA)
  • National Safety Authority (NSA)

At Expleo, we accompany organizations through their digital transformation, driving innovation, quality, and cybersecurity in industrial and critical sectors. We are committed to talent, professional development, and projects with real impact.

We are currently looking for a Cybersecurity Advisor with solid experience in railway, aeronautical, industrial, and/or automotive environments. 

Lead the OT cybersecurity strategy and execution in critical environments, ensuring European regulatory compliance and providing both technical and strategic value in railway, industrial, aeronautical, and automotive projects.  

The role combines technical expertise, regulatory knowledge, team leadership, and client relationship management, with a special focus on critical environments (railway signalling, SCADA, industrial systems, and manufacturing).

If you want to lead OT cybersecurity projects in critical environments and continue growing in a top-tier consultancy, we want to meet you!.

Your main responsibilities will include:

• Define and implement cybersecurity strategies in OT environments 
• Perform risk analyses, technical audits, and maturity assessments.
• Design secure architectures for industrial and railway systems.
• Integration of cybersecurity measures into the lifecycle of critical systems.
• Experience in cybersecurity under European regulations, especially within the framework of the Cyber Resilience Act (CRA).
• Participation in consulting projects and CRA compliance, including:
  • Regulatory impact analysis
  • Compliance assessment (gap analysis)
  • Definition of adaptation plans
• Experience in cybersecurity audits in OT/IT environments aligned with European regulations.
• Review of security controls in digital products, systems, and services.
• Assessment of compliance with requirements for:
  • Security by design
  • Vulnerability management
  • Updates and secure lifecycle
• Coordination and monitoring of internal and external audits.
• Advising clients on the implementation of CRA requirements.
• Definition of cybersecurity policies, processes, and controls.
• Support in certification processes and regulatory compliance.
• Integration with other relevant European regulations or directives:
  • NIS2 Directive
  • IEC 62443 (industrial)
  • ISO 27001
• Development of OT cybersecurity policies and procedures.
• Risk management and business continuity.
• Executive reporting and dashboards.
• Lead teams of OT consultants (training, mentoring, and growth).
• Define internal methodologies and frameworks.
• Project management and direct relationship with clients (CISO, CTO, engineering).
• Support in pre-sales and business development.