Manager & Cyber Security & OT GRC

Acwa Power; Riyadh; On-site; SAR 300,000 - 450,000; Full time

Job summary

A leading energy company in Saudi Arabia is seeking a Manager – Cyber Security & OT GRC to oversee cybersecurity governance, risk, and compliance activities. The ideal candidate will have 10–12 years of experience in IT & OT cybersecurity with a solid understanding of regulatory standards. Responsibilities include assessing cybersecurity programs, reporting risks, and ensuring compliance across project sites. This role is critical for maintaining the company's commitment to cybersecurity and regulatory alignment.

Qualifications

• 10–12 years of experience in IT & OT cybersecurity governance, risk management, or compliance.
• Proven exposure to energy, utilities, industrial, or critical infrastructure environments.
• Experience working with multi-site or project-based organizations is highly preferred.

Responsibilities

• Oversee and assess IT & OT cybersecurity programs for compliance.
• Monitor and ensure timely remediation of cybersecurity findings.
• Report cybersecurity risks, incidents, and compliance gaps.

Skills

IT & OT cybersecurity governance, risk, and compliance

Strong communication skills

Analytical skills

Stakeholder management

Education

Bachelor’s degree in computer science, Information Security, or related field

Tools

NCA ECC

ISO 27001

NIST CSF

IEC 62443

Job description

The Manager – Cyber Security & OT GRC will lead cybersecurity governance, risk, and compliance activities at the project company level, ensuring full alignment with ACWA Power’s corporate cybersecurity standards and regulatory requirements.

This role provides continuous oversight of IT and OT cybersecurity, acting as the key governance interface between project companies and corporate Cybersecurity GRC teams.

Key Responsibilities

• Oversee and assess IT & OT cybersecurity programs at project companies for compliance with corporate and regulatory frameworks
• Review and validate cybersecurity deliverables including:
• VAPT reports
• Monitor and ensure timely remediation of cybersecurity findings
• Ensure alignment with ACWA Power cybersecurity policies, risk appetite, and regulatory commitments
• Coordinate closely with corporate Cybersecurity GRC teams to ensure consistent governance implementation
• Report cybersecurity risks, incidents, and compliance gaps to the Head of Cybersecurity GRC
• Act as a trusted cybersecurity governance advisor to project-level stakeholders.

Technical & Governance Skills

• Strong expertise in IT & OT cybersecurity governance, risk, and compliance
• Solid understanding of OT environments, ICS, and critical infrastructure cybersecurity
• Hands-on experience with cybersecurity frameworks such as:
• NCA ECC
• ISO 27001
• NIST CSF
• IEC 62443
• Ability to review and challenge technical and governance reports from internal teams and vendors

Professional Skills

• Risk assessment and remediation tracking
• Audit and compliance oversight
• Stakeholder management across corporate and entities
• Strong communication, reporting, and analytical skills

Qualifications & Certifications

Education

• Bachelor’s degree in computer science, Information Security, or related field

Certifications (At Least one preferred)

• GICSP
• CISM
• ISO 27001 Implementer

Experience

• 10–12 years of experience in IT & OT cybersecurity governance, risk management, or compliance
• Proven exposure to energy, utilities, industrial, or critical infrastructure environments
• Experience working with multi-site or project-based organizations is highly preferred.

Core & Leadership Competencies

• Accountability & Integrity
• Collaboration & Stakeholder Partnership
• Analytical Thinking
• Quality Orientation
• Drives Results & Champions Agility
• Develops Talent & Builds Effective Teams