Lead, Cyber Security IoT

TAQA Distribution; Abu Dhabi; On-site; AED 360,000 - 600,000; Full time

Job summary

TAQA Distribution seeks a senior cybersecurity specialist to lead design, implementation, and continuous improvement of controls across its IoT/OT environments. You will secure smart meters, AMI, gateways, and field devices while aligning with NIST IoT, IEC 62443, ISO 27001, and UAE IA/NESA standards.

The role requires hands-on security architecture, risk assessment, and collaboration with engineering, operations, vendors, and regulatory stakeholders to protect critical utility assets in Abu

Qualifications

• Bachelor’s degree in Information Technology or an equivalent qualification.
• Minimum 6 years of relevant professional experience.
• Hands-on IoT/OT security architecture, control implementation, and security assessment experience.

Responsibilities

• Lead the design, implementation, and continuous improvement of cybersecurity controls across IoT environments (smart meters, AMI, gateways).
• Ensure alignment with NIST IoT, IEC 62443, ISO 27001, and UAE IA/NESA requirements.
• Collaborate with engineering, operations, vendors, and regulators to implement secure solutions.

Skills

IoT security

OT security

Vulnerability management

Incident response

Security architecture

Network segmentation

Device identity

Secure protocols

Regulatory compliance

Threat monitoring

Education

Bachelor's degree in Information Technology

Tools

IEC 62443

NIST IoT security

ISO 27001

UAE IA/NESA compliance

Job description

Job Summary

Lead the design, implementation, and continuous improvement of cybersecurity controls across TAQA Distribution’s Internet of Things (IoT) environments, ensuring the secure and resilient operation of connected utility assets. Oversee the security of IoT devices, smart meters, Advanced Metering Infrastructure (AMI), IoT platforms, field communication networks, and interfaces between IoT, operational technology (OT), and enterprise IT systems. Act as the cybersecurity functional authority for IoT environments, ensuring alignment with security frameworks, regulatory requirements, and critical infrastructure protection standards.

Responsibilities

• Lead the implementation and continuous improvement of cybersecurity controls across IoT environments, including smart meters, AMI, connected sensors, IoT gateways, and field communication networks.
• Design and implement security controls for IoT platforms, field devices, and connected utility infrastructure, ensuring secure deployment and configuration.
• Apply security-by-design principles across IoT architecture, device onboarding, connectivity, integration, and operational processes.
• Conduct cybersecurity assurance activities, control assessments, compliance monitoring, and validation across IoT environments.
• Ensure alignment with relevant cybersecurity frameworks and standards, including NIST IoT security guidance, IEC 62443, ISO 27001, and UAE IA/NESA requirements, as applicable.
• Identify, assess, and mitigate cybersecurity risks associated with IoT devices, AMI infrastructure, communication networks, and system integration points.
• Lead vulnerability assessment, remediation, and risk mitigation activities across smart meters, AMI systems, head-end systems, IoT gateways, and connected field devices.
• Secure integrations between IoT platforms and enterprise systems, including ERP, GIS, EAM, and cloud platforms.
• Define and enforce secure data flows, network segmentation, communication protocols, and security controls at the boundaries between IoT, OT, and enterprise IT environments.
• Design and implement network security controls, including firewalls, secure communication zones, segmentation, and isolation of IoT traffic.
• Ensure secure connectivity for remote devices, field workforce systems, IoT endpoints, AMI communication networks, and smart grid infrastructure.
• Establish and maintain device identity, authentication, access control, and secure communication mechanisms across IoT environments.
• Collaborate with Security Operations teams to monitor IoT environments for cyber threats, suspicious activities, anomalies, and potential security incidents.
• Support incident detection, investigation, response, and recovery activities involving IoT systems, smart meters, AMI networks, and connected operational infrastructure.
• Conduct security reviews of IoT architectures, interfaces, configurations, and integration designs to identify vulnerabilities and ensure compliance with security requirements.
• Work with engineering, operations, IT, cybersecurity, vendors, and regulatory stakeholders to implement effective security solutions.
• Review vendor solutions and technical designs to ensure IoT devices, platforms, and communication technologies meet organizational security requirements.
• Develop and maintain cybersecurity policies, standards, procedures, technical guidelines, assessment reports, and implementation documentation for IoT environments.
• Support security risk assessments, audit activities, remediation tracking, and regulatory compliance reporting.
• Drive continuous improvement of IoT cybersecurity capabilities in response to emerging threats, evolving technologies, and changes in the utility threat landscape.
• Prepare periodic cybersecurity assessments, risk reports, remediation updates, and management reports to support informed decision‑making.

Key Criteria

• IoT/OT Cybersecurity Expertise: Proven hands‑on experience designing, implementing, assessing, and maintaining cybersecurity controls across IoT or operational technology environments.
• Critical Infrastructure / Utilities Experience: Critical requirement — experience securing IoT/OT environments within the Power & Utilities industry or comparable critical infrastructure environments.
• Smart Metering & AMI Security: Understanding of smart meters, Advanced Metering Infrastructure, head‑end systems, IoT gateways, field devices, and utility communication networks.
• IoT Integration Security: Strong knowledge of securing interfaces and data flows between IoT, OT, and enterprise IT systems, including ERP, GIS, EAM, and cloud platforms.
• Network & Device Security: Practical understanding of device identity, authentication, network segmentation, firewalls, secure communication protocols, access controls, and endpoint protection.
• Vulnerability & Risk Management: Experience conducting security assessments, identifying vulnerabilities, coordinating remediation, and managing cybersecurity risks across connected environments.
• Security Frameworks & Compliance: Knowledge of IEC 62443, NIST IoT security guidance, ISO 27001, and UAE IA/NESA requirements, as applicable.
• Security Monitoring & Incident Response: Experience supporting threat monitoring, anomaly detection, incident investigation, and remediation across IoT/OT environments.
• Hands‑on Technical Capability: Seeking a cybersecurity specialist actively involved in security architecture, technical controls, assessments, and implementation—not a Project Manager focused primarily on coordination, reporting, or governance activities.
• Bachelor’s degree in Information Technology or an equivalent qualification.
• Minimum 6 years of relevant professional experience.
• Technical cybersecurity background with hands‑on IoT/OT security architecture, control implementation, and security assessment experience.
• Strong understanding of device identity, network segmentation, secure protocols, vulnerability management, and security monitoring.
• Experience in critical infrastructure or utility OT/IoT environments.
• Ability to implement security‑by‑design principles and collaborate with engineering, operations, vendors, and regulatory stakeholders.

Desired Requirements

• Master’s degree in Information Technology or an equivalent qualification.
• 9 years of relevant professional experience.
• Advanced experience securing smart metering, AMI infrastructure, IoT gateways, and utility communication networks.
• Experience implementing and assessing security controls aligned with IEC 62443, NIST IoT security guidance, ISO 27001, and UAE IA/NESA requirements.
• Strong understanding of IT/OT convergence, secure integration architecture, network isolation, and critical infrastructure risk management.
• Experience supporting security operations, vulnerability remediation, incident response, and regulatory audits within utility environments.

About TAQA Distribution

TAQA Distribution is a subsidiary of TAQA Group and is responsible for the distribution of electricity and water services across Abu Dhabi, Al Ain, and Al Dhafra. Serving millions of customers through an extensive network of infrastructure assets, we are dedicated to delivering reliable, efficient, and sustainable utility services that support the UAE’s growth and prosperity.