OT Cybersecurity Program Manager

Responsibilities

• Manage and deliver OTICS cybersecurity projects across the full lifecycle: scoping, assessment, architecture design, implementation, and close‑out.
• Act as the primary point of contact for client project teams, building strong working relationships with OT managers, control system engineers, and IT security leads.
• Conduct and oversee OT risk and vulnerability assessments, network reviews, and compliance gap analyses against IEC
  62443 and NCA OT‑CCC standards.
• Design and document OT security architectures, including network segmentation, DMZ designs, secure remote access, and asset inventory frameworks.
• Lead teams of analysts and consultants on engagements, providing technical direction, quality assurance, and mentorship.
• Contribute to proposals and business development efforts, supporting senior leadership in shaping solutions by writing bid content and presenting to clients.
• Stay current on OT threat intelligence, emerging vulnerabilities, and regulatory developments in KSA and the wider GCC.

• 8–11 years in cybersecurity, with at least 4 years of focused experience in OT/ICS/SCADA security across energy, utilities, oil & gas, water, or manufacturing sectors.
• Experience working within a management consulting firm, system integrator, or professional services organization in a client‑facing delivery role.
• Hands‑on proficiency with OT security frameworks and standards: IEC
  62443, NIST CSF, ISA/IEC, and NCA ECC/OT‑CCC.
• Practical knowledge of industrial control systems and major ICS vendors:
  Honeywell, Siemens, Rockwell Automation, Schneider Electric, ABB, or Emerson.
• Solid understanding of OT network protocols (Modbus, DNP3, Profinet, OPC‑UA) and their security implications.
• Experience with OT‑specific security tools.
• Strong report writing and client communication skills: ability to translate technical findings into clear risk narratives for operational and executive audiences.
• Relevant certifications: GICSP, CISM, CISSP, CompTIA Security+, or equivalent.
• Arabic language proficiency strongly preferred; fluent English essential.