We are seeking an experienced and forward-thinking Director – Cybersecurity (Instrumentation & Control Systems) to lead the cybersecurity strategy and governance for all operational technology (OT) environments, including Instrumentation & Control (I&C) systems. This role is critical to safeguarding industrial assets such as DCS, SCADA, PLCs, and SIS against emerging cyber threats while ensuring compliance with industry standards and regulatory requirements. The ideal candidate will combine deep knowledge of I&C system architecture with cybersecurity expertise in industrial settings.
Develop and implement cybersecurity strategies for I&C and OT systems across all sites and projects.
Ensure compliance with industrial cybersecurity standards (e.g., ISA/IEC 62443, NIST 800-82, ISO 27001, NERC CIP).
Conduct risk assessments and threat modeling for control systems including DCS, PLC, SCADA, and SIS.
Define and enforce OT network segmentation, access control policies, and system hardening practices.
Oversee security architecture reviews, vulnerability assessments, penetration testing, and incident response planning.
Collaborate with instrumentation, automation, process, and IT teams to ensure secure-by-design control environments.
Lead implementation of security monitoring tools, intrusion detection, and anomaly detection for OT networks.
Manage vendor relationships for cybersecurity platforms, services, and patch management solutions.
Provide technical leadership and training to engineers, operators, and OT administrators on cybersecurity best practices.
Serve as the internal and external authority on OT cybersecurity matters for audits, regulatory compliance, and stakeholder reporting.
OT Cybersecurity Strategy & Framework Implementation
Protection of I&C Systems (DCS, PLC, SCADA, SIS)
ISA/IEC 62443 & NIST 800-82 Compliance
Network Architecture, Segmentation, and Access Control
Security Incident Response and Recovery Planning
Threat Detection, Monitoring, and Vulnerability Management
Control System Patch Management & Lifecycle Security
Cross-functional Training & Awareness Programs
Vendor and Asset Inventory Security Governance
Integration of Cybersecurity in Project and Asset Lifecycle
Bachelor’s or Master’s degree in Cybersecurity, Computer Engineering, Instrumentation, or Control Systems Engineering
12–18 years of experience, with at least 5+ years in OT/ICS cybersecurity within oil & gas, utilities, power, or process industries
In-depth understanding of industrial automation platforms (e.g., Emerson, Honeywell, Siemens, ABB, Yokogawa)
Professional certifications such as ISA/IEC 62443 Cybersecurity Expert, CISSP, GICSP, or CISM
Strong knowledge of both IT and OT network protocols and architectures
Experience in handling audits, regulatory compliance, and incident response
Excellent leadership, problem-solving, and communication skills