IT/DT Cybersecurity Engineer📣 Job Ad

About Air Products Qudra and the Role

Air Products Qudra is seeking an IT/DT Cybersecurity Engineer to join our team in Duba. This full-time role is central to our commitment to innovation and creating solutions that support critical infrastructure and advanced production facilities. The successful candidate will be responsible for implementing, validating, and documenting robust cybersecurity controls across operational technology (OT), industrial control systems (ICS), and digital technology (DT) environments.

Key Responsibilities

• Implement, validate, and document cybersecurity controls across GHE site systems, OT/ICS environments, industrial networks, cybersecurity tools, and supporting DT infrastructure.
• Support cyber site acceptance testing (SAT) activities, including preparation, execution, evidence capture, defect logging, issue tracking, and closeout documentation.
• Assist with proof-of-compliance (POC) documentation collection, validation, indexing, and quality review.
• Review and support cybersecurity evidence related to network diagrams, system architecture, firewall rules, hardening standards, access control matrices, asset inventories, SIEM/monitoring configurations, and vendor compliance deliverables.
• Support OT/ICS cybersecurity activities such as system hardening, firewall configuration review, password management standards, secure remote access controls, endpoint/security tooling validation, DMZ implementation support, and network segmentation verification.
• Participate in walkthroughs, field verification, technical reviews, and cybersecurity control validation activities.
• Coordinate with cybersecurity vendors, EPC subcontractors, OEMs, and external implementation partners during onsite execution, testing, and documentation activities.
• Collect, organize, and maintain technical cybersecurity evidence needed for proof of compliance and regulatory readiness.
• Provide status updates to the Cyber Lead on technical progress, blockers, risks, documentation gaps, and open actions.
• Support preparation of concise technical updates for project reporting, cyber oversight meetings, and senior management summaries.

Required Qualifications and Skills

• Strong understanding of OT/ICS cybersecurity principles, industrial networks, plant systems, industrial DMZs, secure remote access, system hardening, access control, monitoring, and cyber hygiene.
• Working knowledge of KSA cybersecurity requirements related to NCA and HCIS, or the ability to rapidly apply these requirements in an industrial project environment.
• Experience supporting cybersecurity testing, audit readiness, proof-of-compliance documentation, or regulatory evidence collection.
• Experience reviewing technical cybersecurity documentation such as network diagrams, firewall rules, system architecture, control matrices, asset inventories, hardening checklists, and monitoring configurations.
• Ability to manage multiple technical tasks and documentation workstreams simultaneously.
• Strong written and verbal communication skills in English.
• Ability to work effectively with site teams, engineering teams, vendors, subcontractors, DT resources, and senior cybersecurity stakeholders.
• Ability to operate in a fast-paced project environment with changing priorities, regulatory expectations, and commissioning dependencies.

Preferred Experience and Certifications

• Experience with NCA ECC, OTCC, HCIS/SAIS, IEC 62443, ISO 27001, NIST, CIS Controls, or similar cybersecurity control frameworks.
• Experience in energy, industrial gas, chemical, utility, power generation, renewable energy, or critical infrastructure projects.
• Experience with SIEM, OT monitoring, firewall rule review, PAM, vulnerability management, asset inventory, endpoint security, secure remote access, and industrial network segmentation.
• Certifications such as GICSP, IEC 62443, Security+, CISSP Associate, CISM, CEH, or equivalent.
• Prior Saudi Arabia, GCC, NEOM, or critical infrastructure project experience.

Performance Indicators

• CSAT and POC evidence are collected, validated, organized, and maintained in a usable format.
• Cybersecurity documentation gaps, technical issues, and remediation actions are tracked and closed efficiently.
• Vendor and subcontractor cybersecurity deliverables are reviewed for completeness and quality.
• Technical cybersecurity controls are validated against approved design, project requirements, and compliance expectations.
• Accurate technical status updates are provided to the Cyber Lead, DT Project Manager, PDO Cybersecurity, and NGHC stakeholders.
• Site cybersecurity activities effectively support commissioning, start-up readiness, and regulatory compliance objectives.

Work Environment

This role involves working collaboratively with process controls, DT infrastructure, plant computing, and vendor teams to resolve cybersecurity issues. It requires coordination with various internal and external stakeholders in a dynamic project environment, ensuring cybersecurity activities are integrated with broader implementation and commissioning work.