Lead, Cybersecurity, IoT

Job Summary

Policy, Procedures, Process and Systems

• Ensure the compliance of organization’s policy, systems, processes, procedures, and controls in line with group delegation of authority policy so that all relevant procedural/legislative requirements are fulfilled while delivering a quality, cost-effective service in a consistent manner.

Reporting

• Ensure that all reports are completed in a timely manner and comply with the business policies and standards.
• Manage the preparation of periodical management reports and progress reports to keep the business senior management informed about the progress of various initiatives and to facilitate decision-making.
• Comply with the organization’s requirements in a timely manner.

Iot Security Implementation

• Lead the implementation of cybersecurity controls for IoT environments — including smart meters, Advanced Metering Infrastructure (AMI), connected sensors, field communication networks, and IoT gateways — ensuring secure and resilient operation of TAQA's connected utility assets.
• Ensure secure deployment and configuration of IoT platforms and field devices aligned with security standards and best practices, with particular focus on the interfaces between IoT systems environments.

Security Assurance & Compliance

• Support execution of cybersecurity assurance activities across IoT environments, including compliance monitoring and control validation.
• Ensure adherence to relevant standards such as NIST IoT Security Framework, IEC 62443 as it applies to IoT interfaces, ISO 27001, and UAE IA / NESA

Risk & Vulnerability Management

• Identify and assess cyber risks within IoT environments — including device risks, network vulnerabilities at IoT interfaces, and integration points between AMI and back-office systems.
• Lead and coordinate vulnerability assessment and remediation efforts across IoT networks, AMI infrastructure, smart metering head-end systems, and field devices.

Integration Security

• Ensure secure integration of IoT systems with enterprise IT systems — including ERP, GIS, EAM, and cloud platforms — with particular attention to securing data flows at the boundary where IoT data transitions into operational or enterprise environments.
• Define and enforce secure data flows, network segmentation, and communication protocol security across IoT layers, ensuring IoT traffic is appropriately isolated and monitored.

Network & Infrastructure Security

• Design and implement network security controls for IoT communication networks, including segmentation, firewalls, and secure communication zones that protect IoT devices and their data flows.
• Ensure secure connectivity for remote devices, field workforce systems, and IoT endpoints, including AMI communication networks and smart grid IoT infrastructure.

Monitoring & Incident Support

• Collaborate with Security Operations teams to ensure monitoring of IoT environments for security events and anomalies, including detection of threats targeting smart meters, AMI systems, and IoT gateways.
• Support incident response activities related to IoT systems, AMI networks, and the interfaces between IoT and operational infrastructure.

HSE, Security, and Risk Protocols

• *The Employee shall adhere to all the HSE, Security and Risk Management Rules & Procedures communicated by the company, including:*
• Taking reasonable care of their own health, safety, and security.
• Taking reasonable care of the health, safety and security of persons that may be affected by their acts or omissions at work.
• Co-operate with their employer with respect to any instruction and/or actions taken by the employer to protect the employee and/or comply with HSE and security requirements.
• Report to their immediate line manager any situation which they have reason to believe could present a risk, hazard, or issue to an individual or the company and which they cannot correct themselves.
• Report all HSE and security incidents and work-related injuries.
• Not intentionally or recklessly interfere with or misuse anything provided at the workplace that supports the interest of HSE, security and welfare.

Leadership

• Actively participate in continuous improvement and professional development activities. Support decisions made with integrity and transparency, always aligning with the entity's goals.

Talent Management

• Engage in talent development programs aimed at enhancing skills and supporting career progression. Contribute to a team culture that is connected to the organization's larger purpose.

Culture

• Uphold and promote the organization's values within the team. Foster a collaborative and innovative work environment through active participation and support.

Communication

• Support informed decision-making within the team. Contribute to clear and effective communication, ensuring alignment with organizational objectives and facilitating smooth information flow up and down the chain.

Technical Competencies

• Strong knowledge of IoT security concepts, including:
• Advanced Metering Infrastructure (AMI) and smart grid IoT security
• Connected sensor and field device security
• Smart grid / utility IoT networks
• Device and endpoint security for IoT assets
• Experience with IoT and IT interface security frameworks and standards:
• IEC 62443 (as applicable to IoT integration interfaces)
• NIST IoT Security Framework (NIST SP 800-213)
• ISO 27001
• Understanding of network security architectures for IoT environments, including segmentation and secure zones at IoT interfaces.
• Experience in vulnerability management and risk assessment for IoT systems.
• Familiarity with secure integration between IoT and enterprise IT systems, including secure data exchange and interoperability at system boundaries.
• Knowledge of security tools and monitoring mechanisms relevant to IoT environments.
• Ability to leverage AI-powered tools for IoT threat detection, analysis, and security reporting.

Strategic & Business Competencies

• Strong understanding of utility IoT operations and how connected assets (AMI, smart meters, field sensors) interact with grid infrastructure and field systems.
• Ability to align IoT security with business continuity requirements and the operational safety requirements of utility field systems

Essential Requirements

• Bachelor’s degree in Information Technology or equivalent
• 6 years of relevant working experience

Desired Requirements

• Master’s degree in Information Technology or equivalent
• 9 years of relevant working experience