Cybersecurity Compliance and Risk Management Engineer

Role Overview

Work location - Saudi (Riyadh)

We are seeking a highly skilled Cybersecurity compliance engineer to design, develop, and

implement a comprehensive Cybersecurity Program across three entities operating and

maintaining power generation and desalination plants. The role requires ensuring

compliance with Saudi Arabian cybersecurity frameworks for both IT and OT environments,

including NCA Essential Cybersecurity Controls (ECC), Operational Technology

Cybersecurity Controls (OTCC), and other relevant regulations.

Key Responsibilities

• Conduct site assessments for IT and OT systems across all three entities.
• Design and implement a Cybersecurity Program aligned with KSA national frameworks

(NCA ECC, OTCC).

systems.

continuity measures.

infrastructure.

Travel Requirement

Travel to three operational entities within Saudi Arabia.

Preferred Skills

infrastructure security .

Required Qualifications & Skills

field (Master’s preferred).

o Minimum 7+ years in cybersecurity, with at least 3 years in OT security for

critical infrastructure.

o Proven experience in energy, utilities, or industrial control systems .

o Knowledge of NCA ECC , OTCC Cybersecurity Framework .

o Strong understanding of ICS / SCADA security , network segmentation, and

industrial protocols.

o Familiarity with SIEM tools, firewalls, IDS / IPS, and endpoint protection .

across multiple sites.