Cyber Security Specialist

About the Role

We are collaborating with a globally recognized leader in railway engineering and consulting to identify a seasoned Cyber Security Specialist for a transformative metro/rail project in Saudi Arabia. This pivotal position is dedicated to establishing robust cybersecurity governance for critical rail systems, ensuring adherence to design compliance, managing cyber risks, securing system integrations, and validating operational readiness within a sophisticated multi-system environment. As a key contributor to this high-impact initiative, you will assume full ownership of cybersecurity across rail and metro systems, driving comprehensive risk assessments, secure system integrations, rigorous testing and commissioning validation, and the establishment of operational resilience to safeguard complex rail infrastructure.

Key Responsibilities

The Cyber Security Specialist will play a central role in shaping and enforcing cybersecurity standards for the project. Your duties will include:

• Design and Compliance Oversight: Review and evaluate cybersecurity designs, technical submittals, and architectural proposals to ensure strict compliance with project cybersecurity requirements, including ISO/IEC 27002, IEC 62443, and KSA NCA standards.
• Risk Assessment and Mitigation: Conduct in-depth cyber risk assessments to identify potential threats, vulnerabilities, and their potential impacts across all digital systems within the metro infrastructure, developing actionable mitigation strategies.
• Framework Development and Validation: Create, review, and validate essential cybersecurity frameworks, including the Methodological Framework, Initial Risk Analysis, and Security Policy, in alignment with the Employer’s requirements.
• System Protection and Security Controls: Ensure the protection of network, data, and communication systems against unauthorized access, eavesdropping, spoofing, malware, hacking, and Denial-of-Service (DoS) attacks through robust security measures and controls.
• Access Control Implementation: Support the design and deployment of access control mechanisms, including authentication, authorization, and cryptographic key validation, in accordance with IEEE 802.1X and other relevant industry standards.
• Stakeholder Coordination: Collaborate closely with Project Management Consultancy (PMCM) teams, Design & Build (D&B) contractors, system integrators, and other stakeholders to ensure cohesive cybersecurity governance and compliance across all project interfaces.
• Documentation and Reporting: Prepare detailed documentation, reports, and recommendations regarding cybersecurity compliance, audit findings, non-conformities, and risk mitigation actions for review by the Employer and project leadership.
• Operational Readiness: Validate cybersecurity elements within network security plans, operational guidelines, and system-level protections to ensure end-to-end integrity, confidentiality, and resilience of the metro systems.

Your Profile

To excel in this role, you will bring a blend of technical expertise, analytical rigor, and collaborative acumen. The ideal candidate will possess the following qualifications and experience:

• Education and Experience: A Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Systems Engineering, or a related field, complemented by a minimum of 15 years of hands-on professional experience in cybersecurity, with a focus on metro, rail, critical infrastructure, or large-scale industrial systems.
• Technical Proficiency: A strong command of international cybersecurity frameworks, particularly ISO/IEC 27002, IEC 62443, and KSA NCA national cybersecurity requirements, along with practical experience in threat mitigation, cyber risk assessment, and security architecture design.
• Analytical and Problem-Solving Skills: Exceptional ability to analyze complex cybersecurity documentation, risk studies, network security plans, and system controls, identifying vulnerabilities and recommending effective mitigation strategies.
• Implementation Expertise: Proven experience in implementing access control systems, data protection measures, encryption protocols, authentication mechanisms, and intrusion detection/prevention systems.
• Communication and Collaboration: Outstanding coordination and communication skills, enabling seamless collaboration with diverse stakeholders, including design teams, contractors, system integrators, and Employer representatives, within a multi-contract project environment.
• Professional Attributes: A high level of integrity, meticulous attention to detail, and the adaptability to thrive in a dynamic, fast-paced mega-project setting while addressing evolving cybersecurity challenges.

This is a unique opportunity to contribute to a landmark infrastructure project that will shape the future of urban mobility in Saudi Arabia. If you are passionate about cybersecurity and eager to make a tangible impact in a high-stakes environment, we invite you to apply and join our team of experts.