NGHP IT/DT Cybersecurity Engineer📣 Job Ad

About Air Products Qudra

Air Products Qudra is a joint venture focused on creating ideas and innovations by leveraging the motivation and collective experience of its people. The company develops solutions that support critical infrastructure and enable the construction of world-scale production facilities. This full-time position is based in Duba.

The NGHP IT/DT Cybersecurity Engineer Role

The NGHP IT/DT Cybersecurity Engineer supports the implementation, validation, and documentation of cybersecurity controls. This role involves working across GHE site systems, Operational Technology (OT)/Industrial Control Systems (ICS) environments, industrial networks, cybersecurity tools, and supporting Digital Technology (DT) infrastructure. The engineer contributes to maintaining robust security postures and ensuring compliance within critical operational settings.

Key Responsibilities

• Implement, validate, and document cybersecurity controls across GHE site systems, OT/ICS environments, industrial networks, and DT infrastructure.
• Support cyber site acceptance testing (SAT) activities, including preparation, execution, evidence capture, defect logging, and closeout documentation.
• Assist with proof-of-compliance (POC) documentation collection, validation, indexing, and quality review.
• Review and support cybersecurity evidence related to network diagrams, system architecture, firewall rules, hardening standards, and access control matrices.
• Support cyber hygiene activities with third-party vendors, subcontractors, and site teams.
• Assist in tracking remediation of cybersecurity gaps, Cyber SAT findings, Cyber Risk Assessment recommendations, and vendor documentation deficiencies.
• Support OT/ICS cybersecurity activities, including system hardening, firewall configuration review, password management, secure remote access controls, and network segmentation verification.
• Participate in walkthroughs, field verification, technical reviews, and cybersecurity control validation activities.
• Evaluate vendor and subcontractor deliverables for compliance with project cybersecurity requirements and Air Products standards.
• Coordinate with process controls, DT infrastructure, and plant computing teams to resolve cybersecurity issues impacting commissioning or start-up.
• Collect, organize, and maintain technical cybersecurity evidence for proof of compliance and regulatory readiness.
• Coordinate with cybersecurity vendors, EPC subcontractors, and external partners during onsite execution, testing, and documentation.
• Provide status updates to the Cyber Lead on technical progress, blockers, risks, and open actions.
• Participate in weekly coordination meetings with OT Cybersecurity, DT, site project management, and other cyber stakeholders.

Required Qualifications and Experience

• Strong understanding of OT/ICS cybersecurity principles, industrial networks, plant systems, industrial DMZs, secure remote access, system hardening, access control, monitoring, and cyber hygiene.
• Working knowledge of KSA cybersecurity requirements related to NCA and HCIS, or the ability to rapidly apply these requirements in an industrial project environment.
• Experience supporting cybersecurity testing, audit readiness, proof-of-compliance documentation, or regulatory evidence collection.
• Experience reviewing technical cybersecurity documentation such as network diagrams, system architecture, firewall rules, hardening checklists, and monitoring configurations.
• Ability to manage multiple technical tasks and documentation workstreams concurrently.
• Strong written and verbal communication skills in English.
• Ability to work effectively with site teams, engineering teams, vendors, subcontractors, DT resources, and senior cybersecurity stakeholders.

Preferred Skills and Certifications

• Experience with cybersecurity control frameworks such as NCA ECC, OTCC, HCIS/SAIS, IEC 62443, ISO 27001, NIST, or CIS Controls.
• Experience in energy, industrial gas, chemical, utility, power generation, renewable energy, or critical infrastructure projects.
• Proficiency with SIEM, OT monitoring, firewall rule review, PAM, vulnerability management, asset inventory, endpoint security, secure remote access, and industrial network segmentation tools.
• Relevant certifications such as GICSP, IEC 62443, Security+, CISSP Associate, CISM, or CEH.
• Prior project experience in Saudi Arabia, GCC, or NEOM, particularly within critical infrastructure.
• Arabic language skills.

Work Environment

This role operates within a fast-paced project environment, characterized by changing priorities, evolving regulatory expectations, and commissioning dependencies. The successful candidate will collaborate with diverse teams, including site teams, engineering, vendors, subcontractors, and various cybersecurity stakeholders, to ensure integrated and effective cybersecurity implementation.