Head of Cyber Security

Etihad Rail Operating Companies; Abu Dhabi; On-site; AED 350,000 - 520,000; Full time

Job summary

Etihad Rail Operating Companies seeks Head of Cyber Security specializing in Operational Technology (OT) for railway systems. You will protect OT environments, including signaling and train control, by implementing security measures and ensuring regulatory compliance.

You will coordinate with IT, engineering, and vendors to embed cybersecurity across the OT lifecycle and drive training initiatives. The role emphasizes vulnerability assessments, threat modeling, and subcontractor oversight, with

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field.
• Certifications such as CISSP, CISM, GIAC for ICS/railway are desirable.
• Minimum 10 years in cybersecurity with 3+ years in OT/ICS environments, preferably railway.

Responsibilities

• Security Architecture: design and implement OT-specific controls with minimal disruption.
• Monitoring & Incident Response: support OT network monitoring and incident response using SIEM under supervision.
• Subcontractor Oversight: monitor SOC subcontractor performance and SLAs.
• Regulatory Compliance: ensure adherence to IEC 62443, NIST, EN 50128/50129; assist audits.
• Collaboration: work with IT, engineering, vendors, and stakeholders to integrate cybersecurity across OT lifecycle.
• Training: support OT-focused cybersecurity training to mitigate human vulnerabilities.
• Documentation & Reporting: maintain security records and contribute to executive risk reports.

Skills

OT cybersecurity

Threat modeling

Vulnerability assessment

SIEM monitoring

Incident response

Regulatory compliance

Cross-functional collaboration

Education

Bachelor's/Master's in Cybersecurity/CS/EE

Tools

Firewalls

IDPS

Encryption

Vulnerability scanners

Job description

The Head of Cyber Securityspecializing in Operational Technology (OT) for Railway Systems plays a vital role in protecting the integrity, availability, and confidentiality of railway infrastructure from cyber threats. This position focuses on securing OT environments, including signaling systems, train control, communication networks, and other mission-critical assets crucial for safe and efficient railway operations. The officer will support cross-functional teams in implementing security measures, ensuring compliance with regulations, and addressing emerging risks in a high-stakes industry.

Assist in assessing and prioritizing risks for railway OT through vulnerability scans and threat modeling support.

Security Architecture:

Contribute to designing and implementing OT-specific controls (e.g., firewalls, IDPS, encryption) with minimal disruption.

Monitoring & Incident Response: Support OT network monitoring, assist in incident response, and utilize SIEM tools for threat detection under supervision.

Subcontractor Oversight:

Monitor SOC subcontractor performance, ensuring SLA compliance through metrics and review support.

Regulatory Compliance: Ensure adherence to standards like IEC 62443, NIST, EN 50128/50129; assist in audits and compliance reporting.

Collaboration: Work with IT, engineering, vendors, and stakeholders to integrate cybersecurity across the OT lifecycle.

Training:

Support delivery of OT-focused cybersecurity training to mitigate human vulnerabilities.

Assist in adopting advanced solutions (e.g., AI, zero-trust) to address evolving threats.

Documentation & Reporting:

Maintain security records and contribute to executive reports on risk and posture.

Coordinate with internal teams and regulatory safety entities as directed.

Academic Qualifications:

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field.

Professional Qualifications

• Certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), GIAC (Global Information Assurance Certification) for Industrial Control Systems, or railway-specific credentials are highly desirable.

Experience:

• Minimum of 10 years in cybersecurity, with at least 3 years focused on OT/ICS (Industrial Control Systems) environments, preferably in the railway industry. Demonstrated experience in managing subcontractors and SOC operations is essential.