OT Cybersecurity​/ISMS Specialist

We are seeking an experienced OT Cybersecurity / ISMS Specialist to support cybersecurity governance, risk management and compliance across Operational Technology and Industrial Control System environments. This role is focused on the governance and risk side of OT cybersecurity, including security frameworks, risk assessments, ISMS implementation, policies and procedures, compliance assessments and continuous improvement. The successful candidate should combine strong information security governance and risk management experience with a practical understanding of OT/ICS environments.

Experience with in industrial or critical-infrastructure environments is preferred, including sectors such as Oil & Gas, energy, utilities, power, water, transport, petrochemical or manufacturing.

• Develop and maintain OT cybersecurity policies, standards, procedures and governance frameworks.
• Conduct and support OT cybersecurity risk assessments, gap assessments and compliance reviews.
• Implement and maintain cybersecurity controls and ISMS requirements across OT environments.
• Support alignment with UAE Information Assurance requirements, ISA/IEC 62443, ISO 27001 and NIST.
• Maintain OT cyber risk registers and support risk treatment and remediation plans.
• Map cybersecurity requirements and controls across applicable standards and regulatory requirements.
• Assess the effectiveness and maturity of OT cybersecurity controls and identify areas for improvement.
• Support internal and external cybersecurity audits and maintain appropriate compliance evidence.
• Work with engineering, operations, IT, cybersecurity and vendor teams to ensure security requirements are understood and implemented.
• Develop management reports, security metrics and documentation relating to OT cybersecurity risk and compliance.
• Support continuous improvement of the organisation's OT cybersecurity and ISMS programme.

• Approximately 8+ years' experience across cybersecurity, information security, GRC, ISMS or technology risk, including meaningful experience within OT/ICS cybersecurity.
• Strong experience in cybersecurity risk assessment, governance, compliance and control frameworks.
• Practical experience implementing, maintaining or assessing ISMS and cybersecurity management frameworks.
• Strong working knowledge of ISO 27001 and ISA/IEC 62443.
• Experience with UAE cybersecurity / Information Assurance requirements is highly desirable.
• Good understanding of IC… OT environments, including DCS, SCADA, PLC and industrial network architecture.
• Ability to translate cybersecurity standards and technical risks into policies, controls, procedures and practical remediation plans.
• Experience maintaining risk registers, conducting gap assessments and supporting security audits.
• Strong documentation, report-writing and stakeholder-management skills.
• Experience with in an industrial or critical-infrastructure environment would be advantageous.

A Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, Information Technology, Risk Management or a related discipline is preferred. Relevant certifications such as ISA/IEC 62443, ISO 27001 Lead Auditor/Lead Implementer, GICSP, CISSP, CISA, CISM or CRISC are advantageous. Strong practical OT cybersecurity governance and risk experience may be considered more important than holding a specific combination of certifications.

The position is based in Abu Dhabi with approximately 50% office-based work and 50% site visits. The role will involve interaction with operational, engineering, cybersecurity, management and third-party teams.