Responsibilities :

• Overall industrial cybersecurity program management. Definition and implementation of OT and IoT security policies and standards Implementation of an OT security control framework and a process to assess the maturity of the Group entities. Creating & maintaining NEOM’s IoT security framework in close collaboration with related the businesses. Implementation of procedures, tools and controls for embedding cybersecurity in industrial projects, in contracts and managing the cyber risks induced by third-parties such as SCADA and control systems vendors and operations & maintenance companies – you are responsible for: Security-by-Design in industrial/OT and IoT projects Third-Party Risk Management (TPRM) on the OT/IoT scope Monitoring of compliance with the Group’s OT/IoT security policies and standards as well as compliance with cyber regulations on critical infrastructure Controlling the security level of our industrial assets, including through on-site audits. Follow-up of industrial security findings by Internal Audit. Alignment with security standards – NIST, ISA/IEC 62443, and ISO 27001. Developing & deploying IT security solutions for industrial sites, in close collaboration with the related the businesses Contribute to the Security Awareness & Training program specifically for industrial employees, workers, or any other related stakeholders Contribute to the reporting and the preparation of presentations to the related stakeholders Responsibilities: Security of SCADA systems, Industrial Control Systems (ICS), Distributed Control Systems (DCS); secure separation of OT and IT, digital twins, IT & OT connectivity, Internet of Things (loT) security, Security of CCTV, access control, building management systems and other non-IT equipment using IP network connectivity Works in very close collaboration with NEOM sectors, regions, Business Units, plant managers, Research & Innovation, as well as external stakeholders

Educational requirements:

Experience requirements:

• Senior position (Director level), requiring at least 15 years of business experience, ideally in operations, control & instrumentation (C&I), plant management, health & safety, or security – recently at or near executive level (e.g. COO, CISO…).
• At least 5 years specifically in industrial cybersecurity management roles.
• Experience in OT and optionally IoT security, including experience in managing security for industrial control systems and automation.
• Experience in developing and implementing security strategies and policies for OT and optionally IoT environments.
• At least 5 years of progressive leadership experience in leading cross-functional teams and enterprise-wide programs, operating and influencing effectively across the organization and within complex contexts.

Desired Skills:

• Strong leadership, communication, and interpersonal skills.
• Ability to think strategically and translate business goals into actionable security plans.
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills in English and the ability to communicate effectively with all levels of the organization.
• Ability to work in complex, international environments and matrixed organizations.
• Ability to work under high pressure (e.g. in case of cyber crisis).

Qualifications:

• A Master’s Degree in Cybersecurity, Risk Management or related discipline, or in Business Administration (MBA) is a plus.
• GICSP, CISM, CISSP or equivalent certification required.
• Academic qualification or professional training and experience in legal and regulatory areas is also a plus.
• In-depth knowledge of Operational Technology, Industrial Control Systems, SCADA systems and the associated networking and communication protocols.
• In-depth knowledge of security frameworks, such as NIST, ISA/IEC 62443, and ISO 27001.
• Good understanding of OT network architectures.
• Experience in conducting risk assessments and vulnerability testing.
• Knowledge of critical infrastructure cyber regulations
• Knowledge of OT security solutions (Claroty, Nozomi, CyberX, Tenable etc.) is an asset.
• Knowledge of IoT standards and protocols is a plus.

Benefits:

Will be negotiated

Incentives:

Will be negotiated

How to Apply for NEOM?