Qmet International تعلن عن وظيفة أخصائي أمن سيبراني - مخاطر وأنظمة OT/ICS في الرياض

About QMet

QMet is a Saudi cybersecurity, governance, risk and compliance consultancy that has supported government and private-sector organisations across the Kingdom since 2005.

About the role

We are looking for a Cybersecurity Specialist with hands-on Operational Technology (OT) and Industrial Control Systems (ICS) experience to join a 12-month national critical-infrastructure engagement in the water desalination sector. The engagement covers a head office in Riyadh and operational sites in the Eastern Province, Makkah, Madinah and Jazan regions.

• Perform OT/ICS cybersecurity risk assessments in line with ISA/IEC 62443-3-2, covering system under consideration, high-level and detailed risk assessment, and zones and conduits.
• Assess compliance with the National Cybersecurity Authority (NCA) Operational Technology Cybersecurity Controls (OTCC-1:2022), including gap analysis between the current and target state.
• Review OT architectures and network drawings across the Purdue Model levels (PLC, RTU, DCS, SCADA, HMI and historians) using safe, non-intrusive methods.
• Organise compliance evidence by control number to prepare for regulatory audits.
• Develop risk registers, treatment plans, remediation roadmaps and technical specifications for recommended solutions.
• Contribute to an OT cybersecurity risk management methodology aligned with the NCA National Framework for Cybersecurity Risk Management.
• Conduct site visits, stakeholder interviews and knowledge-transfer sessions with client engineering and operations teams.
• Prepare clear reports in both Arabic and English.

• Bachelor's degree in Information Technology, Information Security or a related engineering discipline.
• At least 5 years of professional experience, including at least 2 years in OT/ICS cybersecurity, NCA controls and OT risk identification.
• Has worked on at least one OT/ICS cybersecurity assessment or compliance project within the last 2 years.
• Working knowledge of ISA/IEC 62443, NCA OTCC and ECC, and the Purdue Model.
• Professional proficiency in Arabic and English.
• Willingness to travel to operational sites across the Kingdom.
• Willingness to complete a background and security screening and to sign a non-disclosure agreement.

• GICSP, ISA/IEC 62443 certifications (Cybersecurity Fundamentals Specialist, Risk Assessment Specialist or Expert), GRID or CISSP.
• Experience in water, power, oil and gas, petrochemicals or utilities.
• Experience with OT asset inventory and passive network monitoring tools.

In line with Saudi Ministry of Human Resources Saudization regulations and the client's security-clearance requirements for this engagement, this position is open to Saudi nationals.

• Meaningful work protecting national critical infrastructure.
• Competitive project-based compensation, with travel and accommodation covered for site visits.
• The opportunity to join QMet's specialist pool for future cybersecurity engagements.

How to apply: Please apply through LinkedIn with your up-to-date CV. Shortlisted candidates will be contacted directly.