Cyber Security Specialist – Rail Projects

About the role

We are seeking an experienced Cyber Security Specialist to join a major metro/rail project in Riyadh, Saudi Arabia. The role will own cybersecurity governance for critical rail systems, ensuring design compliance, risk management and operational readiness across a complex multi‑system environment.

Key responsibilities

• Review and assess cybersecurity designs, technical submittals and architecture proposals against ISO/IEC 27002, IEC 62443 and KSA NCA requirements.
• Conduct cyber risk assessments covering threats, vulnerabilities and impacts across all metro digital systems.
• Develop, review and validate cybersecurity frameworks, risk analyses and security policies.
• Ensure network, data and communication systems are protected from unauthorized access, eavesdropping, spoofing, malware, hacking and DoS attacks.
• Support design and implementation of access‑control mechanisms (authentication, authorization, cryptographic key validation) in line with IEEE 802.1X and related standards.
• Coordinate cybersecurity requirements and audits with PMCM teams, contractors, system integrators and other stakeholders.
• Review and approve cybersecurity elements for network security plans, operational guidelines and system‑level protections.
• Prepare documentation, reports and recommendations on compliance, non‑conformities, audits and risk mitigation actions.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Systems Engineering or a related discipline.
• 15+ years of professional experience in cybersecurity for metro, rail, critical infrastructure or large‑scale industrial systems.
• Proven experience in threat mitigation, cyber risk assessment and security architecture design.
• Strong knowledge of international cybersecurity frameworks, especially ISO/IEC 27002, IEC 62443 and KSA NCA.
• Demonstrated ability to analyse, review and validate cybersecurity documentation, risk studies and network security plans.

Required skills

• ISO/IEC 27002
• IEC 62443
• KSA NCA cybersecurity requirements
• Cyber risk assessment
• Security architecture design
• Network security
• Access‑control mechanisms (authentication, authorization)
• IEEE 802.1X
• Cryptographic key validation