Project Manager Cybersecurity

The Project Manager Cybersecurity controls the day-to-day delivery interface between RTA, the contractor, and internal KM stakeholders, ensuring governance, milestones, deliverables, and acceptance evidence meet the contractual requirements and the RFP. The role is accountable for planning and coordinating all operational gating required for implementation within a live rail environment, including KM change control. Delivery is typically executed within restricted engineering access windows, and requires disciplined readiness checks, testing, communications, contingency planning, and rollback capability.

KEY RESPONSIBILITIES

Strategic

• Lead end-to-end delivery of RTA-sponsored cybersecurity initiatives, ensuring project governance, milestones, and deliverables align with the RFP, contract, and agreed acceptance criteria.
• Maintain a secure-by-design approach across project life cycle stages, ensuring cybersecurity requirements are built in early and evidenced through testing and documentation.
• Ensure solutions align with applicable local and international cybersecurity standards, and rail industry expectations for safety-critical environments, including DESC ISR v3.1, DESC ICS v1.0, ISO/IEC 27001:2022, IEC 62443, and CLC/TS 50701:2023.
• Work in partnership with RTA RMD (Rail Maintenance Department) governance
• Operate within governance chaired by RTA (typically RTA RMD), ensuring key milestones and acceptance decisions are jointly signed off by RTA and Keolis-MHI in line with the contract and RFP

Financial* Manage delivery to agreed budget and schedule baselines for large programmes, including forecasting, variance analysis, and change control.

• Control scope and cost impacts through disciplined management of variations, claims, and dependencies, working with the Project and Innovation Department on KPIs, commercial controls, and penalty exposure.
• Monitor contractor performance against delivery KPIs and milestone evidence, escalating deviations through the Project and Innovation Department governance.

Stakeholder / Customer

• Act as KM’s primary day-to-day project manager interface for RTA and the contractor, ensuring transparent communication, clear action tracking, and timely escalation.
• Coordinate strongly with the Head of Cybersecurity and the cybersecurity team to align delivery with security governance and operational needs
• Align internal stakeholders across IT, OT, Operations, Maintenance, Safety, and QHSE to ensure delivery is practical for a live metro environment.

Operational

• Establish and maintain the full project controls pack, including integrated schedule, RAID log (risks, assumptions, issues, dependencies), decision log, change register, and acceptance tracker.

• Lead delivery planning and execution for work performed in constrained access windows, typically engineering hours, ensuring correct sequencing, readiness, and rollback planning.

• Own and manage all approvals required for implementation in critical infrastructure environments, including:

  • RTA CIMP (Change Impact Management Process) coordination to secure RTA approvals for impacted services and interfaces.

  • ACCA (Asset Configuration Change Application) initiation, coordination, tracking, and closure within KM change control.

  • PTW (Permit to Work) management to ensure site works only proceed when formally authorised, safe, and controlled.

• Ensure the contractor provides compliant and complete work packs, such as method statements, risk assessments, test procedures, and site readiness evidence.

• Enforce separation between Business ICT and Rail OT networks and ensure Rail OT systems remain isolated and air-gapped unless explicitly approved through change control and security governance.

• Manage quality assurance across delivery stages including but not limited to:

  • design reviews

  • FAT (Factory Acceptance Test)

  • PICO (Post-installation Check