ICS Cybersecurity Engineer

About Air Products and NEOM Green Hydrogen Project

Air Products is a pioneering industrial gases company committed to innovation, operational excellence, safety, and environmental care. We are involved in the NEOM Green Hydrogen Project, a major capital venture where we manage the design, construction, and delivery of Process Controls, Process Automation Systems, and IT/Digital Technology infrastructure. Ensuring cybersecurity compliance with local laws and regulations is a critical component of this project’s overall safety and security measures.

Role Summary

The ICS Cybersecurity Engineer is an essential on-site team member responsible for verifying cybersecurity assets to meet project specifications and acceptance criteria. The engineer coordinates closely with engineering, pre-commissioning, commissioning, and client operations teams to facilitate successful cybersecurity verifications. Additionally, this role serves as the technical liaison between Air Products, commissioning teams, and vendors during field evaluations of cyber assets.

Key Responsibilities

• Conduct field verification of design, implementation, and testing of cyber assets ensuring adherence to cybersecurity standards, regulatory frameworks, and project requirements for commissioning and final handover.
• Develop and maintain cybersecurity asset registers and key documentation under guidance from cybersecurity leadership.
• Lead risk assessment exercises, coordinating resolution and implementation of risk mitigation recommendations for both Air Products design and vendor control systems.
• Assist pre-commissioning and commissioning teams by validating firewall configurations, secure remote access, endpoint hardening, asset inventories, access controls, and logging prior to energization.
• Oversee architecture and standards development, as well as FAT, SAT, and CSAT procedures and testing.
• Manage verification and approval processes for third-party device access during commissioning and startup on vendor packages.
• Participate in technical coordination meetings with cross-functional teams as directed by cybersecurity leadership.
• Collaborate with vendors and internal engineering teams to resolve issues identified during cyber asset verification.
• Support change management activities to ensure cybersecurity design, procurement, installation, and commissioning remain on schedule and budget.
• Provide weekly status updates and dashboards to site and project cybersecurity leads.
• Identify, escalate risks and opportunities, and document lessons learned during execution and vendor visits.
• Support operational technology cybersecurity handovers, including managing procedures, asset inventories, access control, and incident response coordination.
• Contribute to the development of OT cybersecurity operations models, including monitoring, patch management, backup, disaster recovery, and secure remote support.

Qualifications and Experience

• Bachelor’s degree in engineering fields such as electronics and communication, instrumentation, or process automation, or equivalent qualifications.
• 10 to 15 years of experience in operational technology or a related domain, with at least 3 years dedicated to designing, building, or verifying cybersecurity for industrial control systems and networks.
• Demonstrated experience implementing Saudi cyber standards (HCIS, NCA, CRA), ISA 62443 industry standards, regulations, and best practices.
• In-depth understanding of control systems including SCADA, DCS, PLCs; knowledge of relevant industrial protocols such as Modbus, PROFINET, DNP3, IEC61850; and familiarity with cybersecurity technologies like firewalls, intrusion detection systems, antivirus software, and vulnerability assessments in ICS/OT networks.
• Preferred certifications include OT/ICS cybersecurity accreditations such as ISA/IEC62443, SANS, as well as cybersecurity credentials like CISSP, CISM, and ISO 27001.
• Proficiency with Microsoft Office Suite tools including Teams, SharePoint, Word, Excel, PowerPoint, and Visio.
• Strong communication skills, both verbal and written, to effectively engage stakeholders at all organizational levels.

Additional Information

The role is based at the project site in Duba, Tabuk Region, Saudi Arabia, operating on a rotation schedule of 8 weeks on-site followed by 2 weeks off. It involves supporting large-scale construction, pre-commissioning, commissioning, startup, and handover phases, ensuring cybersecurity integration without affecting critical timelines.