LinkedIn Job Post — Cybersecurity Specialist – OT/ICS Risk & Compliance

About QMetQMet is a Saudi cybersecurity, governance, risk and compliance consultancy that has supported government and private-sector organisations across the Kingdom since 2005.About the roleWe are looking for a Cybersecurity Specialist with hands-on Operational Technology (OT) and Industrial Control Systems (ICS) experience to join a 12-month national critical-infrastructure engagement in the water desalination sector. The engagement covers a head office in Riyadh and operational sites in the Eastern Province, Makkah, Madinah and Jazan regions.Key responsibilitiesPerform OT/ICS cybersecurity risk assessments in line with ISA/IEC 62443-3-2, covering system under consideration, high-level and detailed risk assessment, and zones and conduits.Assess compliance with the National Cybersecurity Authority (NCA) Operational Technology Cybersecurity Controls (OTCC-1:2022), including gap analysis between the current and target state.Review OT architectures and network drawings across the Purdue Model levels (PLC, RTU, DCS, SCADA, HMI and historians) using safe, non-intrusive methods.Organise compliance evidence by control number to prepare for regulatory audits.Develop risk registers, treatment plans, remediation roadmaps and technical specifications for recommended solutions.Contribute to an OT cybersecurity risk management methodology aligned with the NCA National Framework for Cybersecurity Risk Management.Conduct site visits, stakeholder interviews and knowledge-transfer sessions with client engineering and operations teams.Prepare clear reports in both Arabic and English.Required qualificationsBachelor's degree in Information Technology, Information Security or a related engineering discipline.At least 5 years of professional experience, including at least 2 years in OT/ICS cybersecurity, NCA controls and OT risk identification.Has worked on at least one OT/ICS cybersecurity assessment or compliance project within the last 2 years.Working knowledge of ISA/IEC 62443, NCA OTCC and ECC, and the Purdue Model.Professional proficiency in Arabic and English.Willingness to travel to operational sites across the Kingdom.Willingness to complete a background and security screening and to sign a non-disclosure agreement.Preferred qualificationsGICSP, ISA/IEC 62443 certifications (Cybersecurity Fundamentals Specialist, Risk Assessment Specialist or Expert), GRID or CISSP.Experience in water, power, oil and gas, petrochemicals or utilities.Experience with OT asset inventory and passive network monitoring tools.EligibilityIn line with Saudi Ministry of Human Resources Saudization regulations and the client's security-clearance requirements for this engagement, this position is open to Saudi nationals.What we offerMeaningful work protecting national critical infrastructure.Competitive project-based compensation, with travel and accommodation covered for site visits.The opportunity to join QMet's specialist pool for future cybersecurity engagements.How to apply: Please apply through LinkedIn with your up-to-date CV. Shortlisted candidates will be contacted directly.