OT Cybersecurity Program Manager

Role overview

The OT Cybersecurity Program Manager will guide end-to-end operational technology and industrial control systems security engagements, covering planning, assessment, solution design, deployment, and project closure. This role is based in Riyadh, Saudi Arabia, and is suited to a client-facing professional who can combine technical depth with program leadership.

Client engagement and delivery

• Serve as the main contact for client project teams and build effective working relationships with OT leaders, control system engineers, and IT security stakeholders.
• Lead delivery of OT/ICS cybersecurity initiatives from initial scoping through assessment, architecture design, implementation, and final handover.
• Direct teams of analysts and consultants, ensuring technical guidance, consistent quality, and coaching throughout engagements.

Assessment and architecture

• Run and supervise OT risk assessments, vulnerability reviews, ICS network evaluations, and compliance gap analyses aligned to IEC 62443 and NCA OT-CCC requirements.
• Develop and document OT security architectures, including network segmentation, DMZ structures, secure remote-access models, and asset inventory approaches.

Business support and market awareness

• Support proposal development and business growth activities by helping shape solution approaches, contributing bid content, and participating in client presentations.
• Keep up to date with OT threat intelligence, new vulnerabilities, and regulatory changes across Saudi Arabia and the wider GCC region.

Experience and technical background

The position calls for 8 to 11 years of cybersecurity experience, including at least 4 years dedicated to OT/ICS/SCADA security. Relevant sector exposure includes energy, utilities, oil and gas, water, or manufacturing. Experience in a management consulting firm, systems integrator, or professional services environment in a client delivery role is also expected.

Candidates should bring practical knowledge of OT security frameworks and standards such as IEC 62443, NIST CSF, ISA/IEC, and NCA ECC/OT-CCC. Familiarity with industrial control system environments and vendors such as Honeywell, Siemens, Rockwell Automation, Schneider Electric, ABB, or Emerson is important, along with understanding of OT protocols like Modbus, DNP3, Profinet, and OPC-UA and the related security considerations. Experience with OT-focused security tools is required.

Communication and certification

Strong report writing and client communication skills are needed, with the ability to explain technical issues as practical risk stories for both operational teams and senior executives. Relevant certifications include GICSP, CISM, CISSP, CompTIA Security+, or an equivalent credential.

Language requirement

Arabic fluency is strongly preferred, and English fluency is essential.