Railway will continue to adapt new digital solutions which are necessary and vulnerable to cyber threats. The history of cyber-attacks on critical infrastructures including railway suggests that there is a need for cybersecurity awareness. Both for employees and the general public. The very first step in cyber hygiene is cybersecurity training and awareness for the workforce. A well-educated workforce plays a vital role in building more cyber resiliency across the organization's operation and maintenance. The objective of this research is to evaluate the cybersecurity maturity level for workforce management in three railway organizations. The results show that there is a cybersecurity workforce gap and there is a need to eliminate this gap by enhancing cybersecurity workforce culture. Henceforth, this gap can be improved by developing cybersecurity culture, including cybersecurity training and awareness and by following recommendations provided in this paper.