DT Cybersecurity Lead

NES Fircroft; Saudi Arabia; On-site; SAR 300,000 - 540,000; Full time

Job summary

NES Fircroft seeks an experienced cybersecurity leader to drive site cybersecurity activities in Saudi Arabia, coordinating with DT, OT/ICS teams, project management, and external partners. The role ensures testing, documentation, and evidence collection align with regulatory expectations and project milestones.

You will manage day-to-day cyber resources, maintain alignment with commissioning priorities, and support regulatory submissions and audit readiness across NGHC/HCIS/NCA contexts.

Qualifications

• Strong understanding of KSA cybersecurity regulations (NCA/HCIS).
• Experience leading OT/ICS cybersecurity activities in industry-scale environments.
• Proven ability to coordinate multi-party projects and regulatory submissions.

Responsibilities

• Lead and coordinate site cybersecurity activities, ensuring alignment with project schedules and compliance milestones.
• Serve as the site cybersecurity point of contact among DT, OT/ICS Cybersecurity, project management, vendors, and stakeholders.
• Direct cybersecurity engineers and external partners in implementation, testing, documentation, and evidence collection.
• Coordinate with stakeholders to maintain a consolidated schedule of deliverables, risks, and milestones.
• Oversee third-party and vendor cybersecurity work, ensuring deliverables meet project and regulatory requirements.
• Interface with OT/ICS cybersecurity teams to align cyber activities with site and project goals.

Skills

OT/ICS cybersecurity

Cybersecurity program leadership

Regulatory compliance (KSA/NCA/HCIS)

Project coordination

Stakeholder management

Documentation & evidence collection

Vendor management

Job description

• Lead and coordinate cybersecurity activities at site, including cyber site acceptance testing, cyber hygiene activities, cyber readiness reviews, proof-of-compliance documentation collection, and closure of cybersecurity implementation gaps.
• Serve as the site-based cybersecurity point of coordination between DT, OT/ICS Cybersecurity, project management, process controls, vendors, subcontractors, and NGHC stakeholders.
• Provide day-to-day direction to cybersecurity engineers, external partners, and site-based cyber resources supporting implementation, testing, documentation, and evidence collection.
• Ensure cyber activities are aligned to the project schedule, commissioning priorities, start-up needs, and compliance milestones.
• Coordinate with the DT Project Manager and OT/ICS Cybersecurity team to maintain a consolidated schedule of cybersecurity deliverables, dependencies, risks, and milestones.

Regulatory and Compliance Readiness

• Support execution of cybersecurity activities aligned to applicable KSA regulatory requirements, including NCA ECC, NCA OTCC, HCIS/SAIS operating permit requirements, and applicable CNI/critical systems obligations.
• Lead collection, organization, quality review, and readiness of Proof of Compliance documentation required to support HCIS and NCA compliance activities.
• Coordinate with NGHC on CSAT witnessing, evidence review, documentation feedback, and comment resolution.
• Support NGHC in preparing cybersecurity evidence packages and responses for regulatory submission, recognizing that NGHC is expected to submit documentation to HCIS and NCA while Air Products/APEPC supports project delivery and evidence readiness.
• Ensure compliance documentation is complete, traceable, controlled, and organized for audit, regulatory review, and stakeholder approval.

Stakeholder Interface and Governance

• Interface regularly with the OT/ICS Cybersecurity team, including alignment with PDO on-site cyber resources performing CSAT, cyber hygiene, and vendor-related compliance activities.
• Conduct routine coordination meetings with OT/ICS Cybersecurity, DT, NGHC, and project stakeholders to align cyber execution activities, risks, blockers, and decisions.
• Communicate cybersecurity status, risks, issues, dependencies, and escalation items effectively to senior management and project leadership.
• Translate technical cybersecurity and compliance topics into clear, actionable updates for project executives, DT leadership, NGHC, PDO, and external partners.
• Support governance meetings, executive cyber oversight reviews, and compliance readiness discussions.

Third-Party and Vendor Oversight

• Manage and supervise external partners engaged to design, purchase, implement, document, test, or support cybersecurity solutions for the GHE scope.
• Oversee on-site work performed by external cybersecurity implementation partners and ensure deliverables meet Air Products, NGHC, NCA, HCIS, and project requirements.
• Coordinate third-party support between CSAT, commissioning, start-up, and handover to NGHC.
• Ensure vendor/subcontractor cybersecurity deliverables are tracked, reviewed, documented, and escalated when gaps or delays affect compliance or project readiness.
• Support review of vendor documentation, cyber execution plans, network/security architecture, hardening evidence, access control matrices, SIEM/monitoring documentation, and POC packages.

DT, OT, and Project Integration

• Serve as the interface between DT infrastructure activities and cybersecurity-related activities at site.
• Support alignment across OT systems, industrial DMZs, site network architecture, identity/access controls, monitoring, cyber hygiene, and cyber readiness activities.
• Identify scope gaps, accountability gaps, technical blockers, and documentation gaps that could affect regulatory compliance, start-up readiness, or handover.
• Partner with site engineering, process controls, and project management teams to ensure cybersecurity activities are integrated into site work plans and commissioning sequences.
• Support handover readiness by ensuring documentation, evidence, operating assumptions, and support responsibilities are clearly defined.

Required Qualifications and Experience

• Strong understanding of KSA cybersecurity regulations and regulatory expectations, including NCA and HCIS requirements.
• Understanding of contractual cybersecurity obligations between Air Products/APEPC and NGHC.
• Experience leading OT/ICS cybersecurity activities in industrial, energy, chemical, utility, critical infrastructure, or large capital project environments.
• Experience with cybersecurity site acceptance testing, proof-of-compliance documentation, regulatory evidence collection, cyber risk assessment closure, and audit readiness.
• Ability to manage multiple concurrent priorities across project execution, stakeholder coordination, regulatory compliance, vendor management, and site readiness.
• Strong written and verbal communication skills in English; Arabic language capability a plus.
• Ability to communicate effectively with senior management while also understanding and directing detailed day-to-day work activities at site.
• Strong stakeholder management skills across project, engineering, cybersecurity, operations, vendors, and external/customer organizations.
• Familiarity with OT/ICS security principles, including segmentation, industrial DMZs, secure remote access, access control, hardening, monitoring, and incident readiness.

• Ability to operate in a complex, multi-party environment involving Air Products, NGHC, PDO, DT, EPC contractors, vendors, and regulatory stakeholders