Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.
EY Doha seeks an Assistant Manager - OT Cyber Security in Technology Consulting to drive security across major projects from design to handover. This role emphasizes secure-by-design practices, OT risk management, and implementation of security controls on OT systems, PLC/DC networks, and industrial protocols.
You will work with IT and OT teams to ensure policy compliance, conduct vulnerability assessments, and deliver training to staff on security posture and maintenance.
Other locations: Primary Location Only
Date: 14 Sept 2026
Requisition ID: 1743812
The opportunity
The OT Cyber Security Specialist’s primary focus will be on integrating cybersecurity throughout the lifecycle of major projects, from initial design requirements through to operational handover.
Your key responsibilities
Project-specific security management
Ensure compliance with client organizational policies, Qatar National ICSSS, and ISA/IEC 62443 requirements.
Ensure the "secure by design" principle is applied.
Conduct comprehensive OT-specific risk management for all new systems.
Oversee the secure configuration, deployment, and commissioning of all OT systems.
Create configuration baselines for all new systems.
Follow up on related work to ensure security requirements are met by third-party contractors.
Define and participate in security-focused Factory Acceptance Tests and Site Acceptance Tests to validate the security posture before deployment.
OT security architecture and standards
Design secure network architectures based on the Purdue Model.
Oversee vulnerability assessments of new systems.
Operational support and incident response
Participate in the development and testing of OT-specific incident response plans.
Ensure a smooth handover by conducting training and awareness sessions for both OT and IT staff on the security posture and maintenance of the new systems.
Qualifications and experience
Oil and Gas experience, or experience in a similar industry.
A bachelor's degree in Cyber Security, Information Technology, Engineering, or a related field.
A minimum of six years of experience in Cyber Security, including at least three years focused on operational technology.
Excellent communication, documentation, and stakeholder management skills.
Proven experience managing the security lifecycle within large-scale industrial projects.
A deep understanding of industrial protocols, DCS/PLC systems, and the Purdue Model.
An understanding of OT IDS and asset monitoring technologies.
Strong knowledge of OT security standards and frameworks.
Preferred certifications
Global Industrial Cyber Security Professional (GICSP).
ISA/IEC 62443 certifications.
What we offer
We offer a competitive compensation package where you’ll be rewarded based on performance and recognized for the value you bring to our business. Plus, we offer:
The exceptional EY experience. It's yours to build.
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.