OT/IT CYBERSECURITY CONSULTANT

Duncan & Ross; Abu Dhabi; On-site; AED 300,000 - 520,000; Full time

Job summary

Duncan & Ross is seeking an OT/IT Cybersecurity Consultant in the United Arab Emirates to lead cyber security efforts for major water sector projects. You will review plans, assess architectures, and ensure proper protection against threats across SCADA and IT networks.

Responsibilities include coordinating with package vendors, conducting workshops, and validating security controls to meet industry standards. UAE/GCC experience is advantageous for this role.

Qualifications

• BE/BTech or higher in IT/OT cybersecurity or related engineering fields.
• 10+ years designing and deploying OT cybersecurity for large water/utility projects.
• Experience in UAE or GCC region is preferred.

Responsibilities

• Lead OT/IT cybersecurity for major water network projects and MC Centres.
• Review Cyber Security Plans for client approval and compliance.
• Assess network architectures, zones, segmentation, and DMZ usage.
• Evaluate security products (firewalls, IDS/IPS) for proper configuration.
• Monitor network devices and security appliances deployment and usage.
• Lead design reviews, EPC contractor outputs, and vendor interfaces.

Skills

OT/IT Cybersecurity

Security Architecture

Vendor Coordination

Network Segmentation

SCADA/Control Systems

Education

BE/BTech in IT/OT Cybersecurity/Electrical/ Electronics/Instrumentation

Tools

Firewalls

IDS/IPS

Industrial DMZ

Security Policies

Job description

About the job OT/IT CYBERSECURITY CONSULTANT

KEY RESPONSIBILITIES:

• Responsible for leading Overall OT/IT cyber security for major Master Control Centre/ Water Network OT projects.
• Responsible for reviewing Cyber Security Plan for the project for approval from Client.
• Reviewing network architectures and determining if good practices are being followed (e.g., the "zones & conduits" concept, proper network segmentation, use of Industrial DMZ, etc.); and providing recommendations to comply with applicable cybersecurity framework.
• Reviewing security products utilized (e.g., firewalls, IDS, IPS) and determining if they are configured properly.
• Monitor deployment of network infrastructure devices (e.g., switches, routers, etc.), security appliances (e.g., firewalls, IDS, etc.), and virtualization solutions
• Reviewing security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system logs, security events, and packet captures to identify security threats; and providing recommendations to comply with applicable cybersecurity framework.
• Lead design reviews/workshops, reviewing/ recommending EPC contractor's deliverables, Lead interfaces with various Package Vendors, prepare gap analysis against the project requirements for various control systems supplied by package vendors.
• Responsible for reviewing security products utilized (e.g., firewalls, IDS, IPS) and determining if the proposed configuration meets Project requirement and Industry standards.
• Responsible to review security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system logs, security events, and packet captures to identify security threats; and providing recommendations and work with SCADA/ Control system contractor to comply with applicable cybersecurity framework.
• Review administrative, technical, and physical security controls proposed by SCADA/ Control system contractor and providing recommendations to mitigate the identified security risks.
• Participate and contribute to Cyber security workshops, vulnerability, and risk assessments with SCADA/ Control system contractor to identify security risks and threats (e.g., unsecure remote access points, suspicious remote connections, unauthorized devices on the network, etc.) and providing recommendation to remediate the identified issues, Prepare Report/Update/Maintain and coordinate with all parties to close out action points.
• Review/Comments contractor submitted detailed diagrams (e.g., network, cabling, server, rack, logical architecture, etc.), procedures, and plans (e.g., implementation, SAT, mitigation, etc.) as needed to support projects.
• Responsible to handle Technical Queries/issues from all stake holders, document review/approval of Automation & Package vendors, certification requirements if any, participate in regular meetings with vendors & Client
• Responsible to lead and participate in SCADA/ Control system contractor cyber security test at FAT locations, Responsible to accept the test and signoff reports.
• Responsible for coordination with client, subcontractors, other discipline engineers and Project team.
• Participating in cross-functional and inter-office meetings to provide design input to Engineering team.
• Proactively identify and mitigate technical risks during project stage.
• Travel to the client's site location as and when required.
• Support the construction, commissioning, and start-up activities, to ensure no delay.

REQUIREMENT:

• B.E./ Tech. in IT/OT Cybersecurity/ Electrical/ Electronics/ Instrumentation engineering
• 10+ years experience in designing, testing, installing, testing & commissioning of OT cybersecurity systems in major water & waste water projects or Master Control Centre/ Data Centre projects.
• Experience within the UAE or GCC region will be preferred.

Vertical

Technology