NGHP Cybersecurity Manager

About the role

At Air Products, our purpose is to bring people together to reimagine what’s possible, collaborate and innovate solutions to the world’s most significant energy and environmental sustainability challenges. Grow with us as we embark on building tomorrow together by being the safest, most diverse and most profitable industrial gas company in the world.

The Cybersecurity Manager (NGHP) is the program’s overall technical authority for OT/ICS cybersecurity across all the elements (Power Generation, Power Transmission and Green Hydrogen Production) of the flagship NEOM Green Hydrogen project in the Kingdom of Saudi Arabia. The role is accountable for OT/ICS cybersecurity compliance strategy, execution, integrated testing and oversight of the team to deliver the cybersecurity scope to obtain the final compliance from permitting authorities in KSA.

Key Responsibilities

• Revisit and strategize the implementation of the project cyber compliance roadmap at the current stage of the project; align to NCA ECC/OTCC and HCIS Sec‑12 and Facility Owner’s policies.
• Chair the cyber oversight committee meetings; drive decisions on technology adoption and ensure the cybersecurity scope is implemented to the project needs and successful delivery for operations.
• Identify the scope matrix, test plan and procedures for the project scope and maintain the delivery and Stage‑4 submission readiness.
• Ensure comprehensive oversight and execution of the cybersecurity scope for all DT (Digital Technology) and Plant Computing systems, coordinating with relevant teams to validate that security controls, compliance measures, and risk mitigation strategies are effectively implemented and maintained across these domains.
• Review and approve Proof of Compliance (PoC) documents from vendors, sub‑contractors and EPC team prior to submission to the Facility Operator (FO) and the Consultant for review.
• Lead the closure of Cyber Risk Assessment recommendations and ensure the design/contract gaps are also closed.
• Oversee the implementation of DMZ engineering, cyber services integration, and hardening procedures at all network layers required for compliance submittals.
• Integrate cyber work packages and prerequisites into the project schedule and ensure the readiness of HCIS Stage‑4 milestone is in line with the project commissioning and start‑up milestones.
• Accountability in definition and maintaining the deliverable list and proof of compliance, and their verification before transmittal to Facility Operator/Customer.
• Publish and maintain all required OT/ICS cybersecurity related plans, procedures that are required to be issued in the capacity of the EPC Contractor and Integrator.
• Lead vendor and sub‑contractor coordination for their delivery of respective OT/ICS cybersecurity scope, their validation, punch closure and turnover for commissioning and start‑up.
• Actively pursue technical rigor to bring consistency in technical solutions wherever possible to create uniformity, facilitating ease of maintenance of the project asset when handed over to the Facility Operator (NGHC).
• Ensure a proper handover and transfer to the facility operator, including necessary training identified and aligned in the cyber oversight committee, liaising with the Air Products Subject Matter Experts (SME) as required to resolve technical issues.
• Maintain alignment on the cross‑functional team and advise on schedule, budget impacts and change orders.
• Primary office base is the project site office in Duba, Tabuk Region, Saudi Arabia, with frequent travel to PWE sites (Solar/Wind/Transmission) and vendor locations as required.
• Site engagement is essential during pre‑commissioning, commissioning, and CSAT phase of the project.
• Work onsite on a rotation schedule of 8 weeks on / 2 weeks off.

Required Qualifications

• Bachelor’s degree in engineering (Electronics, Instrumentation, Automation preferred) or equivalent.
• Advanced OT/ICS cybersecurity qualifications such as ISA/IEC62443, NIST CSF.
• 15+ years of leadership experience in OT/ICS cybersecurity on CNI‑class facilities (KSA preferred).
• Proven delivery through HCIS Stage‑4.
• Deep understanding of OT architectures (BPCS/SIS/SCADA), DMZ (L3.5/L3.7), segmentation, firewalls, Panorama, SIEM/Splunk, USB gateway, Nozomi, MFA/jump‑host, RBAC.
• Strong cross‑functional interface background with Process Controls (PCE) and Digital Technology/Plant Computing.
• Experience with KSA regulations such as NCAECC‑1:2018, OTCC‑1:2022 and cybersecurity aspects outlined by SAIS (Supreme Authority of Industrial Security).
• Technical fluency in DMZ design, firewall management (Panorama), SIEM/logging, anomaly detection, endpoint controls, and evidence workflows.
• Documentation experience: CSAT/PoC packs, Aconex/OT workflows, checklists, inventories, submission quality.
• Preferred certifications: ISA/IEC62443 Cybersecurity Expert; CISSP/CCSP; GIACICS or vendor‑specific security (Palo Alto, Splunk). Evidence of delivering KSA OT/ICS cybersecurity regulatory compliance projects is a strong plus.