OT Cybersecurity Program Manager

About This Role

What you will do:

• Manage and deliver OT/ICS cybersecurity projects across the full lifecycle — scoping, assessment, architecture design, implementation, and close-out.

• Act as the primary point of contact for client project teams, building strong working relationships with OT managers, control system engineers, and IT security leads.

• Conduct and oversee OT risk and vulnerability assessments, ICS network reviews, and compliance gap analyses against IEC 62443 and NCA OT-CCC standards.

• Design and document OT security architectures — including network segmentation, DMZ designs, secure remote access, and asset inventory frameworks.

• Lead teams of analysts and consultants on engagements, providing technical direction, quality assurance, and mentorship.

• Contribute to proposals and business development efforts — supporting senior leadership in shaping solutions, writing bid content, and presenting to clients.

• Stay current on OT threat intelligence, emerging vulnerabilities, and regulatory developments in KSA and the wider GCC.

• 8–11 years in cybersecurity, with at least 4 years of focused experience in OT/ICS/SCADA security across energy, utilities, oil & gas, water, or manufacturing sectors.

• Experience working within a management consulting firm, system integrator, or professional services organization in a client-facing delivery role.

• Hands-on proficiency with OT security frameworks and standards: IEC 62443, NIST CSF, ISA/IEC, and NCA ECC/OT-CCC.

• Practical knowledge of industrial control systems and major ICS vendors: Honeywell, Siemens, Rockwell Automation, Schneider Electric, ABB, or Emerson.

• Solid understanding of OT network protocols (Modbus, DNP3, Profinet, OPC-UA) and their security implications.

• Experience with OT-specific security tools

• Strong report writing and client communication skills — ability to translate technical findings into clear risk narratives for operational and executive audiences.

• Relevant certifications: GICSP, CISM, CISSP, CompTIA Security+, or equivalent.

• Arabic language proficiency strongly preferred; fluent English essential.