OT Cybersecurity Principal Consultant

Cyberani by aramco digital; Dhahran Compound; On-site; SAR 280,000 - 420,000; Full time

Job summary

Cyberani by aramco digital seeks an expert OT Cybersecurity Principal Consultant to guide and protect critical infrastructures from cyber threats. You will oversee OT projects, mentor a growing team, and ensure compliance with industry standards and regulations.

Strong communication with stakeholders is essential. Ideal candidates have extensive consulting or vendor experience, deep ICS/OT knowledge, and certifications such as GICSP, CISSP, CISM, or GIAC.

Qualifications

• 8+ years of experience in OT cybersecurity and consulting.
• Strong knowledge of ICS/OT environments and security controls.
• Certifications such as GICSP, CISSP, CISM, GIAC are highly preferred.

Responsibilities

• Lead cybersecurity projects for OT systems in critical infrastructures.
• Provide expert guidance to protect OT environments from threats.
• Assess OT programs against frameworks, standards and regulations.
• Perform risk and vulnerability assessments for manufacturing and OT.
• Develop mitigation strategies and implement security controls.
• Respond to incidents and manage cyber breach activities.
• Lead penetration testing on critical infrastructures.
• Mentor the OT task force and share expertise.

Skills

OT Cybersecurity

ICS/SCADA

Leadership

Communication

Education

Bachelor's degree in computer science

Master's in Cybersecurity

Tools

GICSP

CISSP

CISM

GIAC

Job description

Cyberani by aramco digital is seeking an expert OT Cybersecurity Principal Consultant to join OT cybersecurity team and provide expert guidance on protecting critical infrastructures from cyber threats. The ideal candidate should have extensive experience working for consulting firms, control systems vendors or working on developing and implementing cybersecurity strategies and ensuring compliance with internationally recognized standards. The candidate should also have mentoring experience to support developing the young taskforce to be the next experts in the field of OT Cybersecurity

Responsibilities:

• Lead and oversee cybersecurity projects for operational technology systems in various critical infrastructures.
• Provide expert guidance on protecting OT systems from cyber threats
• Assess OT Cybersecurity program (standards, policies, plans, and procedures) and provide recommendations to comply with applicable cybersecurity frameworks, standards & Regulations based on the operational needs of a client’s organization.
• Conduct vulnerability and risk assessments using industry recognized methodologies specific for manufacturing and critical infrastructure environments to identify security risks and threats and providing recommendation to remediate the identified issues.
• Conduct risk assessments and develop strategies to mitigate potential vulnerabilities
• Implement security measures to safeguard OT environments
• Respond to and manage incidents related to cybersecurity breaches in various OT environments.
• Stay current on industry trends and best practices in OT cybersecurity
• Collaborate with cross-functional teams to ensure comprehensive security measures are in place
• Communicate effectively with stakeholders at all levels to convey the importance of cybersecurity in OT systems
• Able to effectively communicate with clients to ensure their requirements are met and achieve high satisfaction rates.
• Mentor and share knowledge and expertise with deviser team of talented task force in OT team.
• Assessing network architectures and determining against industry recognized standards and ensure practices are being followed.
• Providing recommendations to comply with applicable cybersecurity framework, standards & Regulations.
• Lead and deliver penetration testing to critical infrastructures using various tools and techniques.
• Lead implementation of Anomaly Detection solutions including Nozomi and Dragos.

Requirements:

• Bachelor’s degree in computer science or a related field is required, Masters in Cybersecurity is a plus.
• Certifications such as GICSP, CISSP, CISM, or GIAC is highly preferred.
• Certified ISA Expert is a plus.
• 8+ years of experience.
• Previous experience working for OT Control system vendor and/or Cybersecurity consultation firms is a plus.
• Excellent communication, presentation and interpersonal skills; leadership qualities; conceptual and analytical thinking
• In-depth knowledge of industrial control systems (ICS), SCADA, DCS, and other OT technologies.
• Strong familiarity with NIST, ISA/IEC 62443, ISO 27001/27019, and other cybersecurity frameworks.
• Ability to assess, identify, and mitigate OT-specific cybersecurity risks and threats