Chief Information Security Officer (CISO)Position Contingency Notice: This position is associated with Bay State Rail's proposal to operate the MBTA Commuter Rail network. Employment opportunities for this role are contingent upon Bay State Rail being awarded the contract and successful contract mobilization. Position Summary The Chief Information Security Officer (CISO) is responsible for leading and overseeing all cybersecurity, information security, and cyber risk management activities supporting the Boston Regional Rail operation. Reporting to the executive leadership team, the CISO provides strategic direction for the protection of information technology systems, operational technology infrastructure, communication networks, and other critical rail assets. The CISO develops and maintains a comprehensive cybersecurity program that ensures regulatory compliance, manages cyber risk, directs incident response activities, and safeguards the confidentiality, integrity, availability, and resilience of systems that support safe, secure, and reliable commuter rail operations. The position serves as a trusted advisor to executive leadership on cybersecurity strategy, emerging threats, technology risk, and security investments while fostering a culture of cybersecurity awareness, accountability, and operational excellence throughout the organization.
We're proud to offer: - Competitive compensation package of minimum $ 160,000 - maximum $ 190,000
- In addition to base salary, this role is eligible for an annual Short-Term Incentive (STI) opportunity
Position Profile / Key Responsibilities - Lead and oversee the organization's cybersecurity program, ensuring the confidentiality, integrity, availability, and resilience of IT systems, operational technology (OT), and critical infrastructure.
- Develop, implement, and maintain cybersecurity policies, standards, frameworks, and controls, ensuring compliance with applicable regulatory requirements, contractual obligations, and industry best practices.
- Oversee cybersecurity risk assessments, threat and vulnerability management, and the implementation of appropriate security measures.
- Lead cybersecurity incident response, investigations, recovery activities, and regulatory reporting, ensuring timely and effective management of security incidents.
- Monitor the effectiveness of cybersecurity controls, identify emerging threats and risks, and recommend appropriate mitigation measures.
- Coordinate cybersecurity activities with the CIO, internal stakeholders, third-party service providers, host railroads, contractors, and relevant government agencies.
- Provide strategic cybersecurity advice to management and promote cybersecurity awareness, accountability, and continuous improvement across the organization.
Reporting Relationship: The Chief Information Security Officer shall report directly to the Chief Information Officer.
Qualifications and Experience - Minimum of five (5) years of professional experience in cybersecurity management and information security, including expertise in risk assessment, regulatory compliance, and incident response.
- Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent qualifications.
- Demonstrated experience managing cybersecurity programs in rail transit, transportation, critical infrastructure, or comparable mission-critical environments.
- Proven experience implementing cybersecurity frameworks and managing cybersecurity incident response, investigations, and regulatory reporting.
- Strong knowledge of cybersecurity principles, risk management, security controls, threat and vulnerability management, and IT/OT security.
- Excellent communication, leadership, analytical, and stakeholder management skills.
The ideal candidate is a high-performing strategic leader who drives results and inspires others through integrity, accountability, and strong communication. Combines business acumen and continuous improvement to achieve sustainable business outcomes and enhance customer experience. Builds trust through self-awareness and ethical leadership while empowering others to reach their full potential. Cultivates strong stakeholder relationships, high-performing teams, and creates organizational agility to successfully navigate change and deliver long-term success.
Job Category: Management
Job Type: Full Time
Req ID: 9515
Pay Group: VDD
Cost Center: NONE
The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions upon request.
