OT Cybersecurity Principal Consultant

Cyberani by aramco digital is seeking an expert OT Cybersecurity Principal Consultant to join OT cybersecurity team and provide expert guidance on protecting critical infrastructures from cyber threats. The ideal candidate should have extensive experience working for consulting firms, control systems vendors or working on developing and implementing cybersecurity strategies and ensuring compliance with internationally recognized standards. The candidate should also have mentoring experience to support developing the young taskforce to be the next experts in the field of OT Cybersecurity Responsibilities: • Lead and oversee cybersecurity projects for operational technology systems in various critical infrastructures. • Provide expert guidance on protecting OT systems from cyber threats • Assess OT Cybersecurity program (standards, policies, plans, and procedures) and provide recommendations to comply with applicable cybersecurity frameworks, standards & Regulations based on the operational needs of a client’s organization. • Conduct vulnerability and risk assessments using industry recognized methodologies specific for manufacturing and critical infrastructure environments to identify security risks and threats and providing recommendation to remediate the identified issues. • Conduct risk assessments and develop strategies to mitigate potential vulnerabilities • Implement security measures to safeguard OT environments • Respond to and manage incidents related to cybersecurity breaches in various OT environments. • Stay current on industry trends and best practices in OT cybersecurity • Collaborate with cross-functional teams to ensure comprehensive security measures are in place • Communicate effectively with stakeholders at all levels to convey the importance of cybersecurity in OT systems • Able to effectively communicate with clients to ensure their requirements are met and achieve high satisfaction rates. • Mentor and share knowledge and expertise with deviser team of talented task force in OT team. • Assessing network architectures and determining against industry recognized standards and ensure practices are being followed. • Providing recommendations to comply with applicable cybersecurity framework, standards & Regulations. • Lead and deliver penetration testing to critical infrastructures using various tools and techniques. • Lead implementation of Anomaly Detection solutions including Nozomi and Dragos. Requirements: • Bachelor’s degree in computer science or a related field is required, Masters in Cybersecurity is a plus. • Certifications such as GICSP, CISSP, CISM, or GIAC is highly preferred. • Certified ISA Expert is a plus. • 8+ years of experience. • Previous experience working for OT Control system vendor and/or Cybersecurity consultation firms is a plus. • Excellent communication, presentation and interpersonal skills; leadership qualities; conceptual and analytical thinking • In-depth knowledge of industrial control systems (ICS), SCADA, DCS, and other OT technologies. • Strong familiarity with NIST, ISA/IEC 62443, ISO 27001/27019, and other cybersecurity frameworks. • Ability to assess, identify, and mitigate OT-specific cybersecurity risks and threats Show more Show less

Bachelor’s degree in computer science or a related field is required, Masters in Cybersecurity is a plus. Certifications such as GICSP, CISSP, CISM, or GIAC is highly preferred. Certified ISA Expert is a plus. 8+ years of experience. Previous experience working for OT Control system vendor and/or Cybersecurity consultation firms is a plus. Excellent communication, presentation and interpersonal skills; leadership qualities; conceptual and analytical thinking. In-depth knowledge of industrial control systems (ICS), SCADA, DCS, and other OT technologies. Strong familiarity with NIST, ISA/IEC 62443, ISO 27001/27019, and other cybersecurity frameworks. Ability to assess, identify, and mitigate OT-specific cybersecurity risks and threats.

Lead and oversee cybersecurity projects for operational technology systems in various critical infrastructures. Provide expert guidance on protecting OT systems from cyber threats. Assess OT Cybersecurity program (standards, policies, plans, and procedures) and provide recommendations to comply with applicable cybersecurity frameworks, standards & Regulations based on the operational needs of a client’s organization. Conduct vulnerability and risk assessments using industry recognized methodologies specific for manufacturing and critical infrastructure environments to identify security risks and threats and providing recommendation to remediate the identified issues. Conduct risk assessments and develop strategies to mitigate potential vulnerabilities. Implement security measures to safeguard OT environments. Respond to and manage incidents related to cybersecurity breaches in various OT environments. Stay current on industry trends and best practices in OT cybersecurity. Collaborate with cross-functional teams to ensure comprehensive security measures are in place. Communicate effectively with stakeholders at all levels to convey the importance of cybersecurity in OT systems. Able to effectively communicate with clients to ensure their requirements are met and achieve high satisfaction rates. Mentor and share knowledge and expertise with deviser team of talented task force in OT team. Assessing network architectures and determining against industry recognized standards and ensure practices are being followed. Providing recommendations to comply with applicable cybersecurity framework, standards & Regulations. Lead and deliver penetration testing to critical infrastructures using various tools and techniques. Lead implementation of Anomaly Detection solutions including Nozomi and Dragos.