Industrial Cybersecurity Risk and Compliance Manager

Job ID: 13572

Sector:

Governance, Risk & Compliance

Location: NEOM, Saudi Arabia

COMPANY OVERVIEW

NEOM is an accelerator of human progress and a vision of what a new future might look like. A region in northwest Saudi Arabia on the Red Sea, NEOM is being built from the ground up to include hyperconnected, cognitive cities, ports, next-generation infrastructure and industries, enterprise zones, research centers, sports and entertainment venues and tourist destinations.

As a destination, it will be a home for people who dream big and want to be part of building a new model for exceptional livability, creating thriving businesses and reinventing environmental conservation.

As a workplace, it is a place for people who share our core values of care, curiosity, diversity, passion, respect, and becoming a catalyst for change.

Are you ready to help NEOM find solutions to the world’s most pressing challenges? Are you prepared to create a lasting legacy that benefits generations to come? Then we want to hear from you!

ROLE OVERVIEW

An Industrial Cybersecurity Risk and Compliance Manager is responsible for overseeing the cybersecurity risks associated with industrial environments, such as manufacturing plants, power plants, and other critical infrastructure facilities. This role typically encompasses a variety of responsibilities to ensure the security and integrity of industrial control systems (ICS), operational technology (OT), and the Internet of Things (IoT) devices.

ROLE COMPETENCIES & ACTIVITIES

The Industrial Cybersecurity Governance, Risk and Compliance Manager responsibilities will include, but not be limited to:

Governance Development:

• Develop, implement, and maintain a robust OT governance framework that aligns with overall business strategies and corporate governance policies.
• Establish OT-specific policies, standards, and procedures that guide and control the organization’s operational technology practices.

Risk Management:

• Lead comprehensive risk assessments to identify vulnerabilities and threats to OT systems.
• Implement risk management strategies and mitigation plans to address identified risks and ensure they are managed within acceptable tolerance levels.
• Conduct regular reviews and updates of risk management protocols to adapt to new technologies, processes, or changes in the threat landscape.

Compliance Oversight:

• Oversee and ensure adherence to all applicable local, national, and international regulatory requirements and standards that affect OT systems.
• Regularly audit OT systems and practices to ensure compliance, documenting findings and implementing corrective actions as needed.
• Stay abreast of changes in regulatory environments and update compliance strategies accordingly.

Security Enhancements:

• Collaborate with IT and cybersecurity teams to integrate state-of-the-art cybersecurity technologies and best practices with operational technology systems.

Stakeholder Engagement:

• Act as the primary point of contact for OT governance, risk, and compliance within the organization, ensuring clear communication and reporting lines.
• Prepare and deliver detailed reports and presentations to senior management and board members on OT risk and compliance statuses, strategies, and improvements.
• Engage with external stakeholders including regulators, partners, and industry groups to ensure alignment and compliance with external standards and practices.

Team Leadership:

• Lead, mentor, and develop the OT governance, risk, and compliance team, fostering a culture of continuous improvement and professional growth.
• Manage resource allocation and team performance, setting clear goals and expectations, and providing regular feedback.

Culture and Values

• Embrace NEOM’s culture and Values here.
• Act with honesty and integrity by following best practices, and upholding the robust standards and expectations set out in NEOM’s Code of Conduct.
• Maintain fair, ethical and professional work practices in accordance with NEOM’s Values and Code of Conduct.
• Adhere to NEOM’s Policies, procedures, and controls to ensure compliance with rules.

EXPERIENCE & QUALIFICATIONS

Knowledge, Skills and Experience

• The ideal candidate will possess an in-depth understanding of industrial control systems including SCADA, PLCs, and other OT technologies.
• This role requires at least 15 years of substantial experience in risk management, compliance, or governance, specifically in operational technology settings, as well as a thorough knowledge of relevant industry regulations and standards.
• Strong analytical skills are essential for identifying and mitigating risks in complex systems and environments.
• The candidate must have excellent communication skills to effectively articulate complex issues to both technical and non-technical stakeholders and should demonstrate proven leadership abilities to guide and develop a diverse team.
• The ability to navigate and manage cross-functional collaborations is also crucial for success in this role.

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Engineering, or a related field. A master’s degree in a relevant field can be advantageous.
• Certifications relevant to cybersecurity such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Industrial Cyber Security Professional (GICSP), Certified Ethical Hacker (CEH), or other specialized certifications like ISA/IEC 62443.

NEOM is committed to attracting and retaining the highest caliber of employees to support NEOM’s vision, mission and strategy. NEOM sources the best candidates based on fit for the role and searches local and global markets to identify talent.

NEOM is an equal opportunities employer. All qualified applicants will receive consideration for employment without regard to gender, disability, age, or any other form of discrimination/other characteristic protected by applicable local laws, regulations and ordinances.

As part of our recruitment process, NEOM will undertake reference checks to confirm suitability for the role. All offers of employment are subject to references, evidence of all qualifications and awards, and other background checks being satisfactorily completed. Additionally, all offers are subject to the candidate being able to successfully obtain a work visa to enter and work in the Kingdom of Saudi Arabia.

This job description is not an exhaustive list of duties and responsibilities. The employee may be required to perform additional job-related tasks and duties as assigned. To meet NEOM’s objectives and business needs, the work location is subject to change. Non office-based roles involve outdoor activities. Candidates should be prepared to work outdoors and on construction sites as part of their job responsibilities.

NEOM uses artificial intelligence as part of its recruitment process to assist and enhance efficiency. However, all final hiring decisions are made by human recruiters, ensuring that NEOM’s employment process remains fair and transparent.

The actions of our team should always support the NEOM Values

Learn more about NEOM’s Values