Head of Cyber Security

Etihad Rail Operating Companies; Abu Dhabi; On-site; AED 600,000 - 900,000; Full time

Job summary

Etihad Rail Operating Companies seeks a strategic Head of Cyber Security specializing in Operational Technology (OT) for Railway Systems in the UAE. You will protect signaling, train control, and critical railway assets, leading cross-functional teams to implement robust cyber measures and regulatory compliance.

Responsibilities include risk assessment, OT-focused controls design, SIEM-enabled monitoring, contractor oversight, and collaboration with IT, engineering, and regulatory bodies to

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field.

Responsibilities

• Assess and prioritize OT risks with vulnerability scans and threat modeling support.
• Design and implement OT-specific security controls (firewalls, IDPS, encryption) with minimal disruption.
• Monitor OT networks, assist in incident response, and use SIEM tools for threat detection.
• Oversee SOC subcontractor performance and ensure SLA compliance with metrics.

Skills

OT cybersecurity

Threat modeling

SIEM

Cybersecurity architecture

Regulatory compliance

Vendor management

Incident response

Risk assessment

Cross-functional collaboration

Education

Bachelor's or Master's in Cybersecurity/CS/Engineering

Tools

SIEM

Firewalls

IDPS

Encryption

IEC 62443/NIST/EN 50128/50129

Job description

The Head of Cyber Securityspecializing in Operational Technology (OT) for Railway Systems plays a vital role in protecting the integrity, availability, and confidentiality of railway infrastructure from cyber threats. This position focuses on securing OT environments, including signaling systems, train control, communication networks, and other mission-critical assets crucial for safe and efficient railway operations. The officer will support cross-functional teams in implementing security measures, ensuring compliance with regulations, and addressing emerging risks in a high-stakes industry.

Cyber Risk Management:

Assist in assessing and prioritizing risks for railway OT through vulnerability scans and threat modeling support.

Security Architecture:

Contribute to designing and implementing OT-specific controls (e.g., firewalls, IDPS, encryption) with minimal disruption.

Monitoring & Incident Response: Support OT network monitoring, assist in incident response, and utilize SIEM tools for threat detection under supervision.

Subcontractor Oversight:

Monitor SOC subcontractor performance, ensuring SLA compliance through metrics and review support.

Regulatory Compliance: Ensure adherence to standards like IEC 62443, NIST, EN 50128/50129; assist in audits and compliance reporting.

Collaboration: Work with IT, engineering, vendors, and stakeholders to integrate cybersecurity across the OT lifecycle.

Training:

Support delivery of OT-focused cybersecurity training to mitigate human vulnerabilities.

Innovation:

Assist in adopting advanced solutions (e.g., AI, zero-trust) to address evolving threats.

Documentation & Reporting:

Maintain security records and contribute to executive reports on risk and posture.

Liaison:

Coordinate with internal teams and regulatory safety entities as directed.

Academic Qualifications:

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field.

Professional Qualifications

• Certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), GIAC (Global Information Assurance Certification) for Industrial Control Systems, or railway-specific credentials are highly desirable.

Experience:

• Minimum of 10 years in cybersecurity, with at least 3 years focused on OT/ICS (Industrial Control Systems) environments, preferably in the railway industry. Demonstrated experience in managing subcontractors and SOC operations is essential.