Cyber Security Consultant

About the Role

SThree is seeking a Cyber Security Consultant to join a client, a leading provider of industrial automation and OT cybersecurity solutions. This full-time position is based in Dammam, Eastern Region, and involves supporting major Oil & Gas, Utilities, Power, and Critical Infrastructure organizations across the GCC. The role focuses on OT cybersecurity consulting, architecture design, implementation, and compliance for mission-critical operational environments.

Role Purpose

The Cyber Security Consultant will be responsible for designing and preparing proposals that meet cybersecurity requirements and standards for clients in the Public and Industrial sectors. A significant portion of the work will involve Operational Technology (OT) Security Implementation for industrial clients, particularly within the Oil/Gas & Energy/Utilities sectors. This position requires a strong understanding of both IT and OT systems, along with expertise in cybersecurity practices specific to operational technology.

Key Responsibilities

• Prepare compliance lists for any deviations from standard practices.
• Lead the design of overall architecture and implementation of secure OT network architectures, ensuring segmentation between IT and OT networks.
• Prepare System Architecture, Logical Architecture, Bill of Material with the latest available hardware and software, Functional Design Specification, Detail Design Specification, Factory Acceptance Test Procedure, Site Acceptance Test Procedure, and Method Statement for Integration and Modification.
• Implement and manage strict access controls for the DCS environment, including user authentication, role-based access, and secure remote access methodologies.
• Conduct and oversee regular risk assessments of the OT environment, identifying vulnerabilities and potential threats.
• Ensure adequate segmentation of the DCS from other networks to minimize intrusion risks.
• Collaborate with customer OT cybersecurity teams to ensure consistent security practices across IT and OT landscapes.
• Recommend security enhancements and purchases to support the defense of OT environments.
• Provide training and guidance to OT engineers on security best practices.
• Manage patch management processes.
• Create policies and maintain the design of backup systems.
• Configure What's Up Gold and NMS system installations to commissioning.
• Create architecture diagrams and dashboards.
• Implement Antivirus (MacAfee AV Epo Whitelisting) and desktop hardening systems.
• Manage Antivirus Protection Whitelisting, denial of new executable and related file installations, integrity control, change control, application control, and data loss prevention.
• Design VM HA clusters and VM architecture.
• Configure network switches, design networks, and position components based on functionality, including routing switches.
• Manage Windows Security Update System (WSUS).

Qualifications and Experience

• 5-10 years of experience in cybersecurity, with a focus on Operational Technology (OT) environments.
• Strong understanding of both IT and OT systems.
• Expertise in cybersecurity practices specific to operational technology.
• Hands-on experience in designing and implementing secure network architectures.

Work Environment and Travel

This role is based in the Eastern Region, specifically Dammam, and involves working with both internal and external customers. Travel is required for this position.