About the role:
The Principal IT/OT & Cybersecurity Engineer will lead the design, implementation, and assurance of secure IT and Operational Technology (OT) systems. This role is critical to ensuring cybersecurity compliance, system integration, and uninterrupted operations. The position requires strong expertise in infrastructure security, industrial control systems (ICS), and coordination with multi-disciplinary construction and MEP teams.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key responsibilities and duties are listed, but not limited to, the below:
Cybersecurity Strategy & Compliance
- Develop and implement IT/OT cybersecurity strategy aligned with RTA, UAE NESA, and international standards (e.g., ISO 27001, IEC 62443).
- Conduct risk assessments, threat modelling, and security audits for construction and operational environments.
- Ensure all systems meet compliance requirements for critical infrastructure and public transport systems.
IT/OT Systems Design & Integration
- Oversee the design, installation, and integration of IT and OT systems, including:
- SCADA/BMS systems
- Access control & CCTV
- Network and communication systems
- Ensure secure integration between building systems (MEP, curtain wall systems, utilities) and metro operational systems.
- Work closely with contractors and vendors to ensure cybersecurity-by-design principles.
Operational Environment Security
- Implement cybersecurity controls for a live metro station environment minimizing disruption to ongoing operations.
- Develop procedures for secure construction activities near critical infrastructure.
- Monitor network and OT systems for vulnerabilities, threats, and incidents.
Risk Management & Incident Response
- Identify and mitigate risks related to IT/OT systems during demolition and construction phases.
- Lead incident response planning and execution in case of cybersecurity events.
- Conduct penetration testing, vulnerability assessments, and remediation activities.
Stakeholder Coordination
- Liaise with RTA authorities, project consultants, contractors, and system integrators.
- Provide technical guidance to project teams on cybersecurity standards and best practices.
- Coordinate with MEP, civil, and infrastructure teams to ensure secure system installation.
Documentation & Reporting
-
Prepare cybersecurity plans, policies, and procedures.
-
Maintain documentation for system designs, risk assessments, and compliance reporting.
-
Provide regular updates to senior management on cybersecurity posture.
-
Support continuous improvement and digital ways of working, sharing knowledge and lessons learned.
-
Demonstrate safe, ethical and inclusive behaviours aligned to company values.
Your benefits and rewards:
Our benefits vary by country and are subject to eligibility and local policy:
- Rewards and bonuses: we are owned by our people (no external investors) and through our employee ownership model success is shared through annual bonus opportunities and longer-term participation as your career grows (subject to local plan, eligibility and business performance).
- Medical insurance and life insurance as per local plan (standard and enhanced coverage may vary by country and policy).
- Annual leave in line with local policy (competitive within the market).
- Maternity leave above and beyond local provisions and paternity leave provisions where applicable.
- Professional membership/institution subscription support.
- Learning and career development through project variety, technical networks and structured development opportunities.
- An inclusive culture: we’re committed to equality, diversity and inclusion, and creating a workplace where everyone feels valued and supported.
