Lead OT Cyber Security Consultant

Jacobs; Riyadh Region; Hybrid; SAR 200,000 - 300,000; Full time

Job summary

A leading engineering consultancy is seeking a motivated Cyber Security Professional to join their team in Saudi Arabia. You will be involved in developing security requirements for complex systems and managing team members while focusing on critical national infrastructure projects. The role requires strong analytical skills and experience in cyber security, with opportunities for hybrid working and professional growth. Join an environment committed to innovation and mutual success.

Benefits

Flexible working arrangements

Training and development opportunities

Global giving and volunteering programmes

Qualifications

• Experience in critical national infrastructure or similar sector.
• Understanding of operational safety and secure environments.
• Certifications are a bonus - CISSP, CISA, GICSP.

Responsibilities

• Develop security requirements and architecture for information systems.
• Specify and implement security risk management processes.
• Conduct security operations, including Incident Management.

Skills

Line management experience

Good knowledge of cyber security and engineering

Analytical thinking

Experience in CNI markets

Ability to coordinate planning and implementation

Education

Degree-level qualification or equivalent

Tools

Endpoint Protection

Firewalls

IDS/IPS

Job description

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission‑critical outcomes, operational advancement, scientific discovery and cutting‑edge manufacturing, turning abstract ideas into realities that transform the world for good.

Your impact

At Jacobs, we are building a Digital and Data capability, working to apply digital expertise to some of the most ambitious urban and infrastructure developments around the world.

In Digital and Data we work with clients to establish their digital infrastructure needs, then develop place‑based digital strategies by exploring the assets required and benefits they can bring key stakeholders. We support the design, deployment, cybersecurity and operation of networks, Smart City platforms and operational technology. In this emerging business area, we work with cities, local authorities and developer clients, leading telecom operators and investors, manufacturing clients, IoT providers and development owners.

About The Opportunity

Jacobs are offering an exciting opportunity to join our growing team of Cyber Security professionals to work on a range of projects for our diverse client portfolio that covers Critical National Infrastructure industries such as Rail, Aviation, Highways, Water, Energy and Power and more.

Our team is growing and we are looking for a self‑starting and motivated Cyber Security Professional. With our deep technical, commercial and strategic expertise, we develop solutions that address our client’s critical challenges supporting digitalisation and security. As part of our team, you will support across the full spectrum of security engineering activities in support of the design, development, integration, delivery and in‑service support of complex technical projects. You will collaborate with the team to deliver cyber security solutions, address risks and support secure and resilient digital transformation across the information and operation technology environments.

Jacobs is a “Relationship” focused company and the building and developing of these relationships with our clients is a significant and important part of this role.

You will have the opportunity to work across multiple market sectors to suit your interests and career aspirations under a hybrid working arrangement that best suits each client’s needs. Training and development opportunities specific to the project needs and those of your own career plan will be available and supported.

Key Responsibilities

• Develop security requirements, architecture, and design for complex information systems.
• Develop cyber security assessment approaches.
• Specify and implement a robust security risk management process.
• Support accreditation activities with the client and regulating authorities.
• Conduct security reviews and audits.
• Conduct security operations, including Protective Monitoring, Incident Management, Incident Response and Incident Recovery activities.
• Provide technical assistance to Business Development.
• Build and maintain relationships with key industry stakeholders.
• Maintain familiarity with legislation and regulations of relevance.
• Manage and develop team members.
• Line management responsibilities.
• Develop the OT cybersecurity capability.
• Responsible for growing the team.

Here’s what you’ll need

• Line management experience
• Experience in CNI markets
• Ability to convey the business benefits of a threat‑based, risk‑informed security approach ensuring business risk owners are empowered to make appropriate and proportionate security decisions.
• Good knowledge of the cyber security and engineering disciplines along with analytical thinking to develop, execute, sustain and uphold security policies, standards and guidelines.
• Previous experience in critical national infrastructure or similar sector, involving the setting and delivering of projects and maintenance for complex systems.
• Ability to coordinate planning and implementation of cyber security projects in complex environments.
• Degree‑level qualification or equivalent combination of education and experience with strong technical background.
• Able to travel as and when required.
• Experience of IT and/or OT cyber security risk/threat assessment approaches
• Understanding of design considerations with emphasis on operational safety and the security of operating environments.
• Working knowledge in regulated environments, including regulation, standards and frameworks.
• Proven work experience within a similar role.
• Experience of security engineering and associated solutions (Endpoint Protection, IDS/IPS, Firewalls, etc.) for IT and OT environments.
• Working knowledge and understanding of networking technologies including architectures, key components and common IT/OT protocols.
• An understanding and experience of implementing standards & frameworks including KSA NCA Regulations, ISA/IEC 62443 Series / ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), Technical Assessment Guides and supplementary guidance.
• Certifications are a bonus – Certified Information Systems Security Professional (CISSP), Cybersecurity & Infrastructure Security Agency (CISA), Industrial Control Systems (ICS) Training, AttackIQ – MITRE ATT&CK, SANS Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP).

At Jacobs, from our inclusive employee networks to our positive mental health champions, we are committed to fostering a culture of care where you can truly be yourself. Joining Jacobs connects you locally and globally, leveraging our diverse perspectives and unique backgrounds to power our collective strength. We collaborate and share to ensure mutual success.

Safety, flexibility and professional growth remain paramount in our workplace culture. We provide flexible working arrangements, benefits and opportunities to make a positive impact through global giving and volunteering programmes. Jacobs offers you the support and resources to maximise your potential and help clients worldwide create a better future.

Begin your Jacobs career in an environment that inspires and empowers you to deliver your best work—today, tomorrow and beyond.

Your application experience is important to us, and we’re keen to adapt to make every interaction even better. If you require further support or reasonable adjustments with regard to the recruitment process (for example, you require the application form in a different format), please contact the team via Careers Support.