computer security manager

EVA pharma

<div>
 
 Join EVA Pharma, a leading pharmaceutical company dedicated to empowering the fight for Health and well-being as a fundamental human right. Recognized and certified as&nbsp;a best&nbsp;place to work, we are committed to fostering a supportive and innovative environment for our team members.&nbsp;
 
 
 
 
 Job Summary&nbsp;
 
 
 
 As a
 
 Cybersecurity Manager
 
 , you will have total ownership of our security posture, strategy, and execution. This position demands a rare blend of strategic leadership and deep technical execution; you won't just oversee policy; you will actively build and refine our defences. The ideal candidate has a proven track record of running a SOC, navigating complex regulatory audits, and managing budgets, combined with the agility to scale these functions in a fast-paced environment.
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 
 Security leadership &amp; strategy:
 
 owning the roadmap, the team, and the budget, and translating risk into decisions the business understands
 </li>
 </ul>
 <ul>
 <li>
 
 Detection &amp; response:
 
 leading SOC operations and the full incident response lifecycle, hands-on with modern detection and response, threat intelligence, and security orchestration
 </li>
 <li>
 
 Offensive security:
 
 directing vulnerability management, penetration testing, and proactive testing of our own defences
 </li>
 <li>
 
 Secure architecture:
 
 designing and enforcing controls across identity, access, endpoints, and network, in both on-premises and multi-cloud environments
 </li>
 <li>
 
 Application security:
 
 embedding secure design, threat modelling, and security into the development lifecycle
 </li>
 <li>
 
 Governance, risk &amp; compliance:
 
 building and maintaining our GRC program against recognized standards (ISO 27001, GDPR, and local data protection law) and owning internal and external audits
 </li>
 <li>
 
 Resilience:
 
 building and testing our business continuity and disaster recovery capability
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's degree in computer science or a related field (master's a plus)
 </li>
 <li>
 
 8+ years in information/cyber security, with 3+ years leading a team
 
 and real ownership of people and budget, not just projects
 </li>
 </ul>
 <ul>
 <li>
 
 Deep, hands-on technical depth
 
 &mdash; you've personally led SOC operations and worked directly with detection and response, SIEM/SOAR, threat intelligence, and incident response. You've run vulnerability management, penetration tests, and other offensive techniques yourself
 </li>
 <li>
 
 Strong GRC experience
 
 &mdash; you've actually implemented standards like ISO 27001 and GDPR (not just read about them) and built BCP/DR programs from the ground up
 </li>
 <li>
 
 Secure architecture experience
 
 &mdash; across on-premise and cloud (Azure, GCP, AWS, OCI), covering IAM, MFA, patch management, least privilege, device management, and physical security
 </li>
 <li>
 
 Secure application experience
 
 &mdash; threat modelling and DevSecOps
 </li>
 <li>
 
 Relevant certifications
 
 &mdash; CISSP, CISM, and/or ISO 27001 Lead Implementer/Auditor
 </li>
 <li>
 
 Financial and budgeting experience
 
 , strong stakeholder management, and the ability to lead security awareness across the organization
 </li>
 </ul>
</div>

Cybersecurity Manager

Sentara Health

<div>
 
 City/State
 
 
 
 Norfolk, VA
 
 
 
 Work Shift
 
 
 
 First (Days)
 
 
 
 Overview:
 
 
 
 
 Overview
 
 
 
 The ASM Manager leads the Cyber Attack Surface Management function, responsible for assisting with strategy, execution, and continuous improvement of capabilities that reduce the organization&rsquo;s cyber exposure. This role ensures alignment with enterprise risk priorities and coordinates across security, IT, and business units.
 
 
 <ul>
 <li>
 Define and execute the ASM program strategy, roadmap, and priorities.
 </li>
 <li>
 Oversee all ASM functions: threat intelligence, third-party incident management, identity hygiene, vulnerability management, and legacy OS risk tracking.
 </li>
 <li>
 Establish governance, processes, and performance metrics.
 </li>
 <li>
 Act as primary stakeholder liaison across Security Operations, IT, Risk, and Vendor Management.
 </li>
 <li>
 Drive risk-based prioritization and decision-making.
 </li>
 <li>
 Present risk posture, trends, and recommendations to senior leadership.
 </li>
 <li>
 Ensure integration with CTOC and broader cyber security programs.
 
 
 
 </li>
 </ul>
 
 Education
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field&mdash;or equivalent industry training and certifications. (Preferred)
 
 
 
 </li>
 </ul>
 or
 
 
 <ul>
 <li>
 Experience in lieu of Bachelor&rsquo;s Degree -7 yrs relevant years&rsquo; experience without a degree
 
 
 
 </li>
 </ul>
 
 Certification/Licensure
 
 
 
 <ul>
 <li>
 Certification or License (Preferred)- CISSP/ CISM/CRISC/ Vendor/platform certifications related to vulnerability management, cloud security, or threat intelligence are a plus
 
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 7 yrs relevant years&rsquo; experience without a degree
 </li>
 <li>
 5+ years of experience with a degree
 </li>
 <li>
 Experience leading or supporting Cyber Attack Surface Management (ASM), vulnerability management, threat intelligence, or cyber exposure management programs.
 </li>
 <li>
 Strong hands-on experience coordinating vulnerability remediation efforts and driving risk reduction initiatives across cross-functional teams.
 </li>
 <li>
 Experience building, operationalizing, and maturing cybersecurity processes, governance frameworks, and remediation workflows.
 </li>
 <li>
 Experience partnering with Security Operations, Infrastructure, Cloud, IAM, Risk, Compliance, and Vendor Management teams in a complex enterprise environment.
 </li>
 <li>
 Experience with cybersecurity platforms and tools such as Tenable, Qualys, CrowdStrike, ServiceNow, Microsoft Defender, Palo Alto, or similar technologies.
 
 
 
 </li>
 </ul>
 We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay rate for Full Time employment is:$116,729.60-$216,777.60. Additional compensation may be available for this role such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities.
 
 
 
 Benefits: Caring For Your Family and Your Career
 
 
 
 <ul>
 <li>
 Medical, Dental, Vision plans
 </li>
 <li>
 Adoption, Fertility and Surrogacy Reimbursement up to $10,000
 </li>
 <li>
 Paid Time Off and Sick Leave
 </li>
 <li>
 Paid Parental &amp; Family Caregiver Leave
 </li>
 <li>
 Emergency Backup Care
 </li>
 <li>
 Long-Term, Short-Term Disability, and Critical Illness plans
 </li>
 <li>
 Life Insurance
 </li>
 <li>
 401k/403B with Employer Match
 </li>
 <li>
 Tuition Assistance &ndash; $5,250/year and discounted educational opportunities through Guild Education
 </li>
 <li>
 Student Debt Pay Down &ndash; $10,000
 </li>
 <li>
 Reimbursement for certifications and free access to complete CEUs and professional development
 </li>
 <li>
 Pet Insurance
 </li>
 <li>
 Legal Resources Plan
 </li>
 <li>
 Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.
 
 
 
 </li>
 </ul>
 
 Sentara Health is an equal opportunity employer
 
 and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.
 
 
 In support of our mission &ldquo;to improve health every day,&rdquo; this is a tobacco-free environment.
 
 
 
 For positions that are available as remote work,
 
 
 Sentara Health employs associates in the following states:
 
 
 
 Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.
</div>

Cyber Attack Surface Management Manager

Raytheon

<div>Date Posted:
2026-04-14
Country:
United States of America
Location:
US-CA-EL SEGUNDO-E07 ~ 2012 E El Segundo Blvd ~ BLDG E07
Position Role Type:
Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance Type:
DoD Clearance: Top Secret
Security Clearance Status:
Active and existing security clearance required on day 1
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling &ndash; to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today&rsquo;s mission and stay ahead of tomorrow&rsquo;s threat. Our team solves tough, meaningful problems that create a safer, more secure world.
As a COMSEC Manager you will be managing Communications Security (COMSEC) across various environments, following National Security Agency (NSA) and external customer guidelines. You will be based at our El Segundo facility, working on site, providing critical COMSEC support and overseeing daily operations for Collateral, SAP, and Sensitive Compartmented Information (SCI) programs. Your attention to detail, time management skills, and organizational skills, with proper follow-through will be essential to your success as a COMSEC manager. Extensive understanding of the NSA CSSM Policy 3-16 or other agency COMSEC doctrine and their associated references will be utilized daily. This position requires occasional local travel to other locations and close collaboration with other departments within Raytheon. At times You must be able to perform regular moderate lifting (approximately 25 &ndash; 40 pounds)
What You Will Do<ul><li>
Prepare and load In-Line-Network (INE) encryptors and secure voice products.</li><li>
Submit accurate and timely accounting reports to the NSA Central Office of Records (COR) or another assigned COR.</li><li>
Order, receive, and maintain COMSEC equipment and encryption keys,</li><li>
Track supersession dates, and performing software upgrades.</li><li>
Perform regular inventories, compliance validations, and incident reporting and investigations as necessary.</li></ul>
Qualifications You Must Have<ul><li>
A University Degree or equivalent experience and minimum 5 years prior relevant experience, or An Advanced Degree in a related field and minimum 3 years experience</li><li>
Experience with Microsoft products.</li><li>
Experience working with DoD and NSA.</li><li>
Experience supporting COMSEC activities.</li></ul>
Qualifications We Prefer<ul><li>
Previous NSA COMSEC certification.</li><li>
Experience working in an SAP/SCI environment.</li><li>
Experience with COMSEC Accounting, Distributed INFOSEC Accounting System (DIAS) Reporting &amp; Distribution System (CARDS).</li><li>
Experience with troubleshooting COMSEC equipment.</li><li>
Experience in the management of Windows based information systems.</li><li>
Knowledgeable of legacy COMSEC equipment.</li></ul>
What We Offer<ul><li>
Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Safety, Trust, Respect, Accountability, Collaboration, and Innovation.</li><li>
This position is not eligible for Relocation assistance</li></ul>
Learn More &amp; Apply Now!<ul><li>
Please consider the following role type definition as you apply for this role. Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.</li></ul>
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.
The salary range for this role is 95,500 USD - 181,700 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.
Privacy Policy and Terms:</div>

Alt COMSEC Manager-El Segundo, CA

Ethics HR

Job Responsibilities:<ul><li>Implement and maintain information security policies, standards, and procedures.</li><li>Conduct regular security audits, risk assessments, and vulnerability assessments.</li><li>Monitor security events, investigate incidents, and coordinate remediation activities.</li><li>Collaborate with IT and business teams to ensure secure system design and deployment.</li><li>Maintain and update access control mechanisms, encryption standards, and authentication protocols.</li><li>Ensure compliance with relevant cybersecurity and data protection regulations.</li><li>Provide training and awareness programs to staff on information security best practices.</li><li>Prepare reports on information security metrics, risks, and incidents for senior management.</li></ul>Job Requirements:<ul><li>Bachelor&rsquo;s/Master&rsquo;s degree in Information Technology, Computer Science, Cybersecurity, or related field from a reputable university.</li><li>Minimum of 8 years of experience in information security, with at least 3 years in a managerial role.</li><li>Strong knowledge of IT security frameworks, CBE cybersecurity guidelines, and regulatory compliance.</li><li>Experience in vulnerability management, incident response, and security operations.</li><li>Excellent analytical, problem-solving, and communication skills.</li><li>Preferred certifications include CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or CEH.</li></ul>Work Location: In person

Information Security Manager

Gulf Air

<div>Job Purpose 
Lead and manage the organization's cyber security operations, vulnerability management, cloud and infrastructure security, and security automation activities by implementing effective security controls, ensuring compliance with cyber security standards, strengthening threat detection and incident response capabilities, and embedding secure practices across technology operations to safeguard organizational systems, applications, and information assets.
Roles &amp; Responsibilities<ul><li> 
Conduct thorough security audits to identify vulnerabilities and implement actionable improvements.</li><li>
Develop and enforce robust Privilege Access Management (PAM) strategies to protect sensitive resources.</li><li>
Create and maintain Security Hardening Guidelines in compliance with CIS or SITG Benchmarks, ensuring secure configurations across all systems.</li><li>
Design and deploy automated processes for cybersecurity tasks using Python scripting.</li><li>
Manage the organization's Vulnerability Management Program, including regular scanning, assessment, remediation, and reporting.</li><li>
Implement and oversee Security Automation processes to streamline threat detection, incident response, and compliance checks.</li><li>
Continuously monitor security systems to detect, respond to, and resolve potential incidents promptly.</li><li>
Respond to cybersecurity incidents with effective containment, resolution, and detailed after-action reporting.</li><li>
Collaborate with IT, DevOps, and other teams to embed security practices into all phases of the SDLC.</li><li>
Monitor and maintain security tools such as SIEM, IDS/IPS, DLP, and endpoint protection solutions.</li><li>
Oversee the design, implementation, and management of security architectures for cloud-based and on-premise infrastructures.</li><li>
Perform periodic reviews of firewall configurations, user access controls, and other security mechanisms to optimize protection.</li><li>
Maintain the organization's cybersecurity framework and ensure alignment with industry standards and regulations.</li><li>
Proactively evaluate and deploy emerging cybersecurity technologies to mitigate evolving threats.</li><li>
Act as the primary contact for security incidents and collaborate with external teams for escalated support.</li><li>
Provide leadership in implementing threat intelligence strategies, ensuring continuous improvement of the organization's security posture.</li></ul>
Skills &amp; Technologies Required<ul><li> 
Threat Detection and Response using any of these tools (Microsoft Defender XDR, Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft Defender for Endpoint).</li><li>
Vulnerability Management using any of these tools (Nessus, Qualys, OpenVAS).</li><li>
privilege Access Management (PAM) using any of these tools (Wallix, CyberArk, BeyondTrust).</li><li>
Security Automation and Orchestration using any of these tools (Python, Splunk Phantom, Cortex XSOAR, Azure Sentinel ).</li><li>
DevSecOps using any of these tools (SonarQube, GitHub Actions, AWS CodePipeline).</li><li>
Security Hardening and Compliance using any of these tools (CIS Benchmarks, SITG Benchmarks, Qualys Policy Compliance).</li><li>
Cloud Security using any of these tools (AWS Security Hub, Azure Security Center, Microsoft Defender for Cloud).</li><li>
Network Security using any of these tools (Palo Alto Networks, Fortinet, Cisco ASA, Snort, Suricata).</li><li>
Endpoint Security using any of these tools (Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne).</li></ul>
Qualifications<ul><li> 
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (Master's degree preferred).</li><li>
Relevant certifications such as CISSP, CISM, CEH, CompTIA Security+, or equivalent.</li></ul></div>

MANAGER - CYBER SECURITY

Elbit Systems of America

Company Information: 
Elbit America is a leading provider of high-performance products, system solutions, and support services focusing on the defense, homeland security, commercial aviation, and medical instrumentation markets. With facilities throughout the United States, Elbit Systems of America is dedicated to supporting those who contribute daily to the safety and security of the United States. Elbit Systems of America, LLC is wholly owned by Elbit Systems Ltd. (NASDAQ: ESLT and TASE: ESLT), a global high-technology company engaged in a wide range of programs for innovative defense and commercial applications. For additional information, visit: ElbitAmerica.com or follow us on YouTube.
 
Job Summary: 
The Cybersecurity Compliance Program Manager leads and oversees the organization’s comprehensive cybersecurity compliance initiatives, ensuring alignment with key standards such as CMMC, ISO 27001, SOX, PCI DSS, and Cyber Essentials. This role is responsible for developing and maintaining compliance policies, coordinating and managing internal and external audits, conducting risk assessments, and driving remediation efforts. The manager collaborates with cross-functional stakeholders to ensure regulatory adherence, proactively identifies areas for process improvement, and provides expert guidance to mitigate organizational risk while supporting a culture of security and compliance.
 
Responsibilities and Tasks
 <ul>
<li>Lead Cybersecurity Compliance Program:</li>
<li>Serve as the primary owner for all cyber compliance initiatives, policies, and processes.</li>
<li>Drive compliance strategy and execution across the organization.</li>
</ul>
CMMC Compliance Leadership: 
Oversee all activities related to achieving and maintaining Cybersecurity Maturity Model Certification (CMMC) compliance.
 Coordinate gap assessments, remediation plans, and evidence collection.
 
Manage Multi-Framework Compliance: 
Ensure compliance with additional standards and regulations, including:
 <ul>
<li>ISO 27001</li>
<li>Cyber Essentials</li>
<li>SOX (Sarbanes-Oxley)</li>
<li>PCI DSS (Payment Card Industry Data Security Standard)</li>
</ul>
Develop and maintain documentation, policies, and procedures aligned with these frameworks.
 
Audit Coordination: 
Act as the primary point of contact for internal and external audits.
 Prepare and present compliance evidence and reports to auditors and leadership.
 
Risk Management: 
Identify compliance risks and develop mitigation strategies.
 Maintain a compliance risk register and track remediation efforts.
 
Stakeholder Engagement: 
Collaborate with IT, Security, Legal, and Business teams to ensure compliance requirements are understood and met.
 Provide training and awareness programs related to compliance obligations.
 
Education, Experience/Knowledge & License/Certification
 <ul>
<li>Bachelor’s degree in Cybersecurity, Information Technology, or related field</li>
<li>7+ years of experience in Governance, Risk, and Compliance roles.</li>
<li>Strong knowledge of CMMC and DFARS requirements.</li>
<li>Certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor are highly desirable.</li>
</ul>
Skills and Abilities
 <ul>
<li>Experience managing audits and regulatory assessments.</li>
<li>Excellent communication and leadership skills (without direct people management).</li>
</ul>
#LI-SW1
 
Here Are Some of the Great Benefits We Offer: 
<ul>
<li>Most locations offer a 9/80 schedule, providing every other Friday off</li>
<li>Competitive compensation & 401(k) program to plan for your future</li>
<li>Robust medical, dental, vision, & disability coverage with qualified wellness discounts</li>
<li>Basic Life Insurance and Additional Life & AD&D Insurances are available</li>
<li>Flexible Vacation & PTO</li>
<li>Paid Parental Leave</li>
<li>Generous Employee Referral Program</li>
<li>Voluntary Benefits Available: Longer Term Care, Legal, Identity Theft, Pet Insurance, and more</li>
<li>Voluntary Tricare Supplement available for military retirees</li>
</ul>
This job description does not list all the duties of the job. You may be asked by your supervisors or managers to perform other duties. The employer has the right to revise this job description at any time. The job description is not an employment contract. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position. Elbit America is an equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities.
 
*** If you encounter issues with your application, please email technicalsupport@elbitsystems-us.com***

Cybersecurity Compliance Program Manager (GRC)

Air Products

<div>At Air Products, we reimagine what&rsquo;s possible. By tapping into the motivation of our people and our collective experience, we create the ideas and innovations that drive us forward. When we come together &ndash; where every voice is heard and everyone knows they belong and matter &ndash; we create solutions that launch people into space, support lifesaving care in hospitals, and enable the construction of groundbreaking, world scale production facilities. 
Reimagine What&rsquo;s Possible 
The Cybersecurity Manager (NGHP) is the program&rsquo;s overall technical authority for OT/ICS cybersecurity across all the elements (Power Generation, Power Transmission and Green Hydrogen Production) of the flagship NEOM Green Hydrogen project in the Kingdom of Saudi Arabia. The is a key role, accountable for OT/ICS cybersecurity compliance strategy, execution, integrated testing and oversight of the team to deliver the cybersecurity scope to obtain the final compliance from permitting authorities in KSA.
The Cybersecurity Manager leads a functional team of cybersecurity engineers and professionals and also expected to manage and deliver the end-to-end scope of cybersecurity of the project with focus on proof-of-compliance, closure of design gaps, and implementing the cyber-risk assessment recommendations. The role provides cross-functional leadership and interfaces among Project Management, Process Controls, Digital Technology, Vendors, Sub-Contractors, consultants and end-Customer / Facility Operator (NEOM Green Hydrogen Company).
This role is based out of Duba, Tabuk Region, Saudi Arabia working on rotation of 8 Weeks ON / 2 Weeks OFF.
This position will be a site-based role with the below duties:<ul><li>
Revisit and strategize the implementation of the project cyber compliance roadmap at the current stage of the project; align to NCA ECC/OTCC and HCIS Sec-12 and Facility Owner&rsquo;s policies.</li><li>
Chair the cyber oversight committee meetings; drive decisions on technology adoption and ensure the cybersecurity scope is implemented to the project needs and successful delivery for operations.</li><li>
Identify the scope matrix, test plan and procedures for the project scope and maintain the delivery and Stage-4 submission readiness.</li><li>
Ensure comprehensive oversight and execution of the cybersecurity scope for all DT (Digital Technology) and Plant Computing systems, coordinating with relevant teams to validate that security controls, compliance measures, and risk mitigation strategies are effectively implemented and maintained across these domains.</li></ul><ul><li>
Review and approval of Proof of Compliance (PoC) documents from vendors, sub-contractors and EPC team prior to submission to the Facility Operator (FO) and the Consultant for review.</li><li>
Lead the closure of Cyber Risk Assessment recommendations and ensure the design/contract gaps are also closed.</li><li>
Oversight on the implementation of DMZ engineering, cyber services integration, and hardening procedures at all network layers required for compliance submittals.</li></ul><ul><li>
Integrate cyber work packages and prerequisites into project schedule and ensure the readiness of HCIS Stage-4 milestone is in line with the project commissioning and start-up milestones.</li><li>
Accountability in definition and maintaining the deliverable list and proof of compliance, and their verification before transmittal to Facility Operator/Customer.</li><li>
Publish and maintain all required OT/ICS cybersecurity related plans, procedures that are required to be issued in the capacity of the EPC Contractor and Integrator.</li><li>
Lead vendor and sub-contractor coordination for their delivery of respective OT/ICS cybersecurity scope, their validation, punch closure and turnover for commissioning and start-up.</li><li>
Actively pursue technical rigor to bring consistency in technical solutions wherever possible to create uniformity in order will facilitate ease of maintenance of the project asset when handed over to Facility Operator (NGHC).</li><li>
Ensuring a proper handover and handoff to the facility operator including necessary training as identified and aligned in the cyber oversight committee liaise with the Air Products Subject Matter Experts (SME) as required to resolve the technical issues</li><li>
Maintain the alignment on the cross functional team and advise on schedule, budget impacts and change orders.</li><li>
Primary office base is project site office in Duba, KSA, with frequent travel to PWE sites (Solar/Wind/Transmission) and vendor locations as required. Site engagement is essential during pre-commissioning, commissioning, and CSAT phase of the project.</li></ul>
Minimum Requirements:<ul><li>
Bachelor&rsquo;s degree in engineering (Electronics/Instrumentation/Automation preferred) or equivalent; advanced ICS/OT cybersecurity qualifications (ISA/IEC 62443, NIST CSF).</li><li>
15+ years leadership in ICS/OT cybersecurity on CNI-class facilities (KSA preferred); proven delivery through HCIS Stage-4.</li><li>
Deep understanding of ICS architectures (BPCS/SIS/SCADA), DMZ (L3.5/L3.7), segmentation/firewalls/Panorama, SIEM/Splunk, USB gateway, Nozomi, MFA/jump-host, RBAC.</li><li>
Strong cross-functional interface background with Process Controls (PCE) and DT/Plant Computing.</li><li>
Working Experience in KSA regulations such as NCA ECC-1:2018, OTCC-1:2022 and cybersecurity aspects outlined by SAIS (Supreme Authority of Industrial Security).</li><li>
Technical fluency: DMZ design, firewall management (Panorama), SIEM/logging, anomaly detection, endpoint controls, and evidence workflows.</li><li>
Documentation: CSAT/POC packs, Aconex/OT workflows, checklists, inventories, submission quality.</li><li>
Preferred to have certifications such as ISA/IEC 62443 Cybersecurity Expert; CISSP/CCSP; GIAC ICS or any vendor-specific security (Palo Alto, Splunk).</li><li>
Evidence of delivering KSA ICS / OT Cybersecurity regulatory compliance projects is a strong plus.</li></ul>
#LI-LG1 
Founded in 1940, Air Products is a world-leading industrial gases company and has a proud history of innovation, operational excellence, with an unwavering commitment to safety and environmental stewardship. Working together, we are taking our passion and diverse backgrounds forward to reimagine what&rsquo;s possible and generate a cleaner future for our customers, our communities, and the world.</div>

NGHP Cybersecurity Manager

Search 9413+ Computer security manager jobs near you this June. New roles added regularly across leading industries. Apply today.