OT Cybersecurity / ISMS Specialist

VerityX Talent; Abu Dhabi; Hybrid; AED 240,000 - 340,000; Full time

Job summary

VerityX Talent is seeking an experienced OT Cybersecurity / ISMS Specialist to govern cybersecurity governance, risk management and compliance across OT/ICS environments. The role focuses on governance, risk, and ISMS, aligning with UAE requirements and international standards.

The ideal candidate brings 8+ years in OT/ICS security, strong risk assessment and policy development skills, and the ability to lead audits and continuous improvement across industrial settings.

Qualifications

• Bachelor's degree in a related discipline.
• 8+ years of experience in cybersecurity, GRC, ISMS or technology risk with OT/ICS background.
• Strong knowledge of ISO 27001 and ISA/IEC 62443.
• Experience with UAE Information Assurance requirements.
• Ability to translate standards into policies and remediation plans.

Responsibilities

• Develop and maintain OT cybersecurity policies, standards, procedures and governance frameworks.
• Conduct and support OT cybersecurity risk assessments, gap assessments and compliance reviews.
• Implement and maintain cybersecurity controls and ISMS requirements across OT environments.
• Support alignment with UAE Information Assurance requirements, ISA/IEC 62443, ISO 27001 and NIST.
• Maintain OT cyber risk registers and support risk treatment and remediation plans.
• Map cybersecurity requirements and controls across applicable standards and regulatory requirements.
• Assess the effectiveness and maturity of OT cybersecurity controls and identify areas for improvement.
• Support internal and external cybersecurity audits and maintain appropriate compliance evidence.
• Work with engineering, operations, IT, cybersecurity and vendor teams to ensure security requirements are understood and implemented.
• Develop management reports, security metrics and documentation relating to OT cybersecurity risk and compliance.
• Support continuous improvement of the organisation's OT cybersecurity and ISMS programme.

Skills

OT/ICS cybersecurity

GRC

ISMS

ISO 27001

ISA/IEC 62443

Policy development

Stakeholder management

Education

Bachelor's degree in Cybersecurity or related field

Job description

We are seeking an experienced OT Cybersecurity / ISMS Specialist to support cybersecurity governance, risk management and compliance across Operational Technology and Industrial Control System environments. This role is focused on the governance and risk side of OT cybersecurity, including security frameworks, risk assessments, ISMS implementation, policies and procedures, compliance assessments and continuous improvement. The successful candidate should combine strong information security governance and risk management experience with a practical understanding of OT/ICS environments. Experience within industrial or critical-infrastructure environments is preferred, including sectors such as Oil & Gas, energy, utilities, power, water, transport, petrochemical or manufacturing.

Key Responsibilities:

• Develop and maintain OT cybersecurity policies, standards, procedures and governance frameworks.
• Conduct and support OT cybersecurity risk assessments, gap assessments and compliance reviews.
• Implement and maintain cybersecurity controls and ISMS requirements across OT environments.
• Support alignment with UAE Information Assurance requirements, ISA/IEC 62443, ISO 27001 and NIST.
• Maintain OT cyber risk registers and support risk treatment and remediation plans.
• Map cybersecurity requirements and controls across applicable standards and regulatory requirements.
• Assess the effectiveness and maturity of OT cybersecurity controls and identify areas for improvement.
• Support internal and external cybersecurity audits and maintain appropriate compliance evidence.
• Work with engineering, operations, IT, cybersecurity and vendor teams to ensure security requirements are understood and implemented.
• Develop management reports, security metrics and documentation relating to OT cybersecurity risk and compliance.
• Support continuous improvement of the organisation's OT cybersecurity and ISMS programme.

Experience We're Looking For:

• Approximately 8+ years' experience across cybersecurity, information security, GRC, ISMS or technology risk, including meaningful experience within OT/ICS cybersecurity.
• Strong experience in cybersecurity risk assessment, governance, compliance and control frameworks.
• Practical experience implementing, maintaining or assessing ISMS and cybersecurity management frameworks.
• Strong working knowledge of ISO 27001 and ISA/IEC 62443.
• Experience with UAE cybersecurity / Information Assurance requirements is highly desirable.
• Good understanding of IC… OT environments, including DCS, SCADA, PLC and industrial network architecture.
• Ability to translate cybersecurity standards and technical risks into policies, controls, procedures and practical remediation plans.
• Experience maintaining risk registers, conducting gap assessments and supporting security audits.
• Strong documentation, report-writing and stakeholder-management skills.
• Experience within an industrial or critical-infrastructure environment would be advantageous.

A Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, Information Technology, Risk Management or a related discipline is preferred. Relevant certifications such as ISA/IEC 62443, ISO 27001 Lead Auditor/Lead Implementer, GICSP, CISSP, CISA, CISM or CRISC are advantageous. Strong practical OT cybersecurity governance and risk experience may be considered more important than holding a specific combination of certifications.

The position is based in Abu Dhabi with approximately 50% office-based work and 50% site visits. The role will involve interaction with operational, engineering, cybersecurity, management and third-party teams.