OT/ICS Cybersecurity & Automation Specialist ( 1 year contract)

ENOC; Dubai; On-site; AED 350,000 - 550,000; Full time

Job summary

ENOC is seeking a Cybersecurity & Automation professional to lead day-to-day management and coordination of OT/ICS security projects and operations, aligning with ENOC’s policies. You will translate requirements into secure designs, support site cybersecurity/automation work, and collaborate with cross-functional teams to maintain security across industrial networks.

The role emphasizes implementing security controls, handling risk assessments, and working with ICS and IT stakeholders to improve

Qualifications

• Bachelor’s degree in a technical field (Engineering, CS, IS, Industrial Cybersecurity).
• Experience with Automation and Security Programs phases from assessment to operations in multinational or with OEMs/Vendors for OT/IACS.
• Certifications such as ISA/IEC 62442, CISSP, SANS IC are preferred.

Responsibilities

• Enforce site installation compliance with ENOC cybersecurity controls and procedures.
• Develop and maintain security solutions for IC infrastructure (firewalls, IPS, secure remote access, endpoints).
• Conduct asset inventory for ICS and security solutions and delegate control to asset owners.
• Coordinate security assessments, reporting, and project planning with OT/ICS teams.

Skills

Analytical thinking

Communication skills

OT cybersecurity knowledge

Education

Bachelor’s degree in a technical field

Tools

Darktrace

Dragos

Nozomi Networks

Claroty

Job description

Execute the Cybersecurity and Automation technical day-to-day management and coordination of related projects and operations within the business segments to ensure alignment of all process and operational aspects with ENOC’s Automation and cyber security policies and work requirements.

This includes implementation of OT Automation and Cybersecurity needs of the organization and translating them into secure systems designs and principles, also adopt the recommended technologies and best practices within IC/OT domain.

Support technical evaluation and site related cybersecurity and automation work in coordination with business team.

Principal Accountabilities

Enforce site installation compliance and adherence to ENOC’s cybersecurity controls, policies, and procedures.

Develop, implement, operate, and maintain security solutions with IC infrastructure such as firewalls, IPS, patching solution, secure remote access and endpoint security.

Conduct asset inventory for the industrial automation control systems and the cybersecurity solutions and then delegate control, ownership, and authentication of OT/ICS assets to the associated asset owner.

Liaise with the cyber security & Automation team to facilitate cyber security assessments, performance reporting and projects planning and implementation.

Review and improve IT/OT network design and architecture with reference to PERA, ISA Reference Model across business units.

Design and implement security measures in line with ENOC cyber security and industrial best practices and requirements.

Review Engineering submittals (HLD, LLD, FDS, SDS, FAT, SAT, Operation manuals, etc.) from the Vendors for IACS and security systems integration.

Review risk assessments and audit observations to implement mitigation actions to address identified gaps and coordinate the identified mitigation actions with all relevant stakeholders.

Additional Principal Accountabilities

Coordinate & support site works with vendors (OEM, system integrators, Service providers) and Company’s concerned departments for the RFI, RFQ, POC, SOW, SOS, Purchase requisite, etc.

Participate in ICS projects and changes within the business unit to ensure proper implementation of cyber security requirements.

Support implementation and testing of the industrial automation control systems along with the related security technologies and controls.

Support to generate site specific Cybersecurity & Automation policies and procedures.

Partner with the department team member (Network, System, Automation) to populate the HLD, LLD, and identify improvement opportunities and the current challenges in addition to raised alerts and incidents with the OT/ICS environment.

Work with OT/ICS Automation & Cybersecurity Manager and CIC & SOC teams and department team member for the new CVE and Zero-Day vulnerability identified within the OT/ICS environment.

Participate in IC security incident response through all phases and act as a member of Security Incident Response Team (SIRT).

Raise and highlight pain points in aligning Automation and Cybersecurity controls within the business.

Experience

Bachelor’s degree in a technical field, e.g., (Engineering degree, Computer Science or Information Systems, Industrial Cybersecurity, or another related technical field with appropriate experience).

Demonstrated years of experience working with Automation and Security Programs phases from Assessment, design, implementation to maintain and daily operation with multinational organization or with OEM and Vendors for OT/IACS digital industries and automation systems (SCADA, DCS, SIS, PLC, PAC).

Preferred professional certifications: ISA/IEC 62442, CISSP, SANS IC…

Minimum 7+ years of experience in industrial control systems and cybersecurity preferably in the Oil & Gas, Energy, Lubricant, Aviation and Critical Infrastructure

Demonstrated years of experience working with Automation and Security solutions.

Advanced Knowledge of Automation process and safety instrumented system industries standards such as IEC61131, SIL and FS standards IEC61508/IEC61511, ATEX Directive and ISA standards.

Extensive knowledge of industrial communication protocols and ports used such as: (Serial Protocols, HART, TCP/IP, UDP, DNP3, Modbus, IEC 61850, S7, OPC, OPC UA, EtherNet/IP, BACnet, Profibus and PROFINET)

Experience with security engineering principles, various cybersecurity assessment methodologies, security control implementation, and validation, and system life-cycle practices.

Experience with any OT security tools such as Darktrace, Dragos, Nozomi Networks, Claroty etc. is a must, and having training certificate is preferable.

Strong analytical and critical thinking skills, along with strong written and oral communication skillsersecurity controls within the business.