IT/DT Cybersecurity Engineer

Role Overview

Technical Cybersecurity Execution

• Support cybersecurity control implementation, validation, and documentation across GHE site systems, OT/ICS environments, industrial networks, and DT infrastructure.
• Support cyber site acceptance testing, including preparation, evidence capture, defect logging, issue tracking, and closeout documentation.
• Assist with proof-of-compliance evidence collection, validation, indexing, and quality review.
• Review evidence related to network diagrams, architecture, firewall rules, hardening, access control, asset inventories, monitoring, and vendor compliance.
• Track remediation of cybersecurity gaps, Cyber SAT findings, risk assessment recommendations, evidence gaps, and vendor documentation deficiencies.

OT/ICS and Site Support

• Support system hardening, firewall configuration review, password management, secure remote access, endpoint security validation, DMZ implementation, and network segmentation verification.
• Participate in walkthroughs, field verification, technical reviews, and cybersecurity control validation activities.
• Evaluate vendor and subcontractor deliverables against cybersecurity requirements, company standards, NCA/HCIS expectations, and approved architecture.
• Work with process controls, DT infrastructure, plant computing, and vendor teams to resolve issues affecting commissioning, start-up, or handover readiness.
• Document technical decisions, implementation status, deviations, risk acceptance items, compensating controls, and open actions.

Compliance and Vendor Coordination

• Collect, organize, and maintain technical cybersecurity evidence for proof of compliance and regulatory readiness.
• Prepare CSAT and POC documentation packages and respond to stakeholder comments, assessor findings, and follow-up requests.
• Maintain trackers for cyber issues, documentation gaps, evidence status, and remediation actions.
• Coordinate with cybersecurity vendors, EPC subcontractors, OEMs, and external implementation partners during execution, testing, and documentation.
• Review vendor evidence and escalate incomplete, inconsistent, or non-compliant documentation.

Coordination and Reporting

• Provide the Cyber Lead with updates on technical progress, blockers, risks, documentation gaps, and open actions.
• Participate in weekly coordination meetings with OT Cybersecurity, DT, site project management, and other cyber stakeholders.
• Prepare concise technical updates for project reporting, cyber oversight meetings, and senior management summaries.
• Coordinate cybersecurity activities with broader implementation and commissioning work.

Required Qualifications and Experience

• Strong understanding of OT/ICS cybersecurity principles, industrial networks, plant systems, industrial DMZs, secure remote access, system hardening, access control, monitoring, and cyber hygiene.
• Working knowledge of KSA cybersecurity requirements related to NCA and HCIS, or the ability to rapidly apply them in an industrial project environment.
• Experience supporting cybersecurity testing, audit readiness, proof-of-compliance documentation, or regulatory evidence collection.
• Experience reviewing technical cybersecurity documentation such as network diagrams, firewall rules, system architecture, control matrices, asset inventories, hardening checklists, and monitoring configurations.
• Ability to manage multiple technical tasks and documentation workstreams simultaneously.
• Strong written and verbal communication skills in English; Arabic language skills are preferred.
• Ability to work effectively with site teams, engineering teams, vendors, subcontractors, DT resources, and senior cybersecurity stakeholders.
• Ability to operate in a fast-paced project environment with changing priorities, regulatory expectations, and commissioning dependencies.

Preferred Qualifications

• Experience with NCA ECC, OTCC, HCIS/SAIS, IEC 62443, ISO 27001, NIST, CIS Controls, or similar cybersecurity control frameworks.
• Experience in energy, industrial gas, chemical, utility, power generation, renewable energy, or critical infrastructure projects.
• Experience with SIEM, OT monitoring, firewall rule review, PAM, vulnerability management, asset inventory, endpoint security, secure remote access, and industrial network segmentation.
• Certifications such as GICSP, IEC 62443, Security+, CISSP Associate, CISM, CEH, or equivalent are preferred.
• Prior Saudi Arabia, GCC, NEOM, or critical infrastructure project experience is preferred.

Success Measures