OT Cyber Security Assurance and Risk Specialist

About the role

The OT Cyber Security Assurance and Risk Specialist will ensure ENEC Operations complies with the cyber security program and UAE nuclear regulator (FANR) requirements. You will assess, monitor and improve the security posture of operational technology (OT) assets within a nuclear power plant environment.

Key responsibilities

• Analyze and assess vulnerabilities in OT software, hardware and network components.
• Investigate remediation options, alternative controls and best practices for detected OT cyber security issues.
• Conduct cyber security risk assessments and impact analyses for changes to critical digital assets.
• Perform security monitoring, log analysis and compromise assessments to detect incidents and determine root causes.
• Design and review OT security architecture, providing security requirements and gap‑remediation recommendations.
• Support CDA modification reviews and ensure appropriate security assessments are performed.
• Coordinate with personnel, information security and external stakeholders, monitoring action requests and driving timely closure.
• Lead periodic awareness campaigns on safe OT security behaviors, including handling of portable mobile and media devices.
• Assist with FANR inspections, providing required data and tracking remedial actions.
• Lead comprehensive risk assessments, maintain the risk register, and perform threat modelling and third‑party risk evaluations.

Required profile

• Proven experience in OT cyber security, preferably within high‑risk industrial or nuclear environments.
• Strong understanding of vulnerability management, security monitoring and incident investigation for OT systems.
• Familiarity with regulatory frameworks such as FANR and experience conducting compliance assessments.
• Ability to work with cross‑functional teams and manage stakeholder expectations.

Required skills

• OT security assessment
• Vulnerability assessment
• Security monitoring and log analysis
• Risk assessment and threat modeling
• Security architecture design
• Incident investigation
• Regulatory compliance (FANR)