BDO Saudi Arabia, Dr. Mohamed Al-Amri & Co.

OT Cybersecurity Audit

Riyadh, Saudi ArabiaPosted 3 days ago

Salary
AED 18k–27k a month· est.
Job type
Full time
Level
Lead
Field
Engineering & Technology
Work mode
On site

About the role

ABOUT BDO – TECHNOLOGY & DIGITAL ADVISORY BDO's Technology & Digital Advisory practice delivers Cybersecurity & OT Security, IT Audit & Assurance, Data Privacy & Governance, Technology Risk (GRC), Business Resilience and Digital Transformation services across the Kingdom. POSITION LEVEL: ASSISTANT MANAGER / MANAGER ROLE OVERVIEW Join our team to deliver OT cybersecurity audits of plant networks and control systems (DCS, ESD, SCADA) for clients in the energy and industrial sectors. KEY RESPONSIBILITIES • Plan and execute OT cybersecurity audits of plant networks and control systems. • Assess OT governance, risk, compliance, network segmentation and asset management. • Review access and privileged access management, vulnerability and patch management, malware prevention and secure configuration. • Assess obsolescence, physical security, backup, BCP/DRP and management of change. • Review security monitoring (SIEM/SOC), data protection, IIoT and supply chain security. • Prepare workpapers, findings and recommendations in line with internal audit standards. • Manager level: Lead fieldwork, supervise the team, manage stakeholders and draft the audit report. REQUIREMENTS Manager Level • Minimum 8 years of IT/OT audit experience, including hands-on OT audits. • CISA mandatory, plus at least one of: CISSP, ISA/IEC 62443 Cybersecurity Specialist or ISA/IEC 62443 Lead Implementer. • Experience leading audit engagements and reporting to senior management. All Levels • Bachelor's degree in Engineering, Computer Science, Information Systems or a related field. • Knowledge of ISA/IEC 62443, NIST SP 800-82 and NCA OTCC. • Strong report-writing skills in English.

Requirements

  • Manager Level
  • Minimum 8 years of IT/OT audit experience, including hands-on OT audits.
  • CISA mandatory, plus at least one of: CISSP, ISA/IEC 62443 Cybersecurity Specialist or ISA/IEC 62443 Lead Implementer.
  • Experience leading audit engagements and reporting to senior management.
  • All Levels
  • Bachelor's degree in Engineering, Computer Science, Information Systems or a related field.
  • Knowledge of ISA/IEC 62443, NIST SP 800-82 and NCA OTCC
  • Strong report-writing skills in English.

Responsibilities

  • Plan and execute OT cybersecurity audits of plant networks and control systems.
  • Assess OT governance, risk, compliance, network segmentation and asset management.
  • Review access and privileged access management, vulnerability and patch management, malware prevention and secure configuration.
  • Assess obsolescence, physical security, backup, BCP/DRP and management of change.
  • Review security monitoring (SIEM/SOC), data protection, IIoT and supply chain security.
  • Prepare workpapers, findings and recommendations in line with internal audit standards.
  • Manager level: Lead fieldwork, supervise the team, manage stakeholders and draft the audit report.

Skills

  • CISA
  • CISSP
  • ISA/IEC 62443 Cybersecurity Specialist
  • ISA/IEC 62443 Lead Implementer
  • IT audit
  • OT audit
  • SCADA
  • DCS
  • ESD
  • network segmentation
  • vulnerability management
  • patch management
  • SIEM
  • SO C
  • ICD/DRP
  • risk assessment
  • report writing
  • English proficiency

Not sure you fit this role?

Upload your CV and see how you score against BDO Saudi Arabia, Dr. Mohamed Al-Amri & Co. and every other live job. It's free.

Get my free matches
Cyber Security jobs in Riyadh81 live roles, top employers and pay.See all →

Similar jobs across the Gulf