OT Cybersecurity Program Manager

What you will do

• Manage and deliver OT/ICS cybersecurity projects across the full lifecycle — scoping, assessment, architecture design, implementation, and close-out.
• Act as the primary point of contact for client project teams, building strong working relationships with OT managers, control system engineers, and IT security leads.
• Conduct and oversee OT risk and vulnerability assessments, ICS network reviews, and compliance gap analyses against IEC 62443 and NCA OT-CCC standards.
• Design and document OT security architectures — including network segmentation, DMZ designs, secure remote access, and asset inventory frameworks.
• Lead teams of analysts and consultants on engagements, providing technical direction, quality assurance, and mentorship.
• Contribute to proposals and business development efforts — supporting senior leadership in shaping solutions, writing bid content, and presenting to clients.
• Stay current on OT threat intelligence, emerging vulnerabilities, and regulatory developments in KSA and the wider GCC.
• 8–11 years in cybersecurity, with at least 4 years of focused experience in OT/ICS/SCADA security across energy, utilities, oil & gas, water, or manufacturing sectors.
• Experience working within a management consulting firm, system integrator, or professional services organization in a client-facing delivery role.
• Hands-on proficiency with OT security frameworks and standards: IEC 62443, NIST CSF, ISA/IEC, and NCA ECC/OT-CCC.
• Practical knowledge of industrial control systems and major ICS vendors: Honeywell, Siemens, Rockwell Automation, Schneider Electric, ABB, or Emerson.
• Solid understanding of OT network protocols (Modbus, DNP3, Profinet, OPC-UA) and their security implications.
• Experience with OT-specific security tools
• Strong report writing and client communication skills — ability to translate technical findings into clear risk narratives for operational and executive audiences.
• Relevant certifications: GICSP, CISM, CISSP, CompTIA Security+, or equivalent.
• Arabic language proficiency strongly preferred; fluent English essential.