About Air Products

Air Products, founded in 1940, is a world-leading industrial gases company recognized for its history of innovation, operational excellence, and unwavering commitment to safety and environmental stewardship. The company focuses on creating solutions that support various industries, from space exploration to healthcare and large-scale production facilities, by leveraging the collective experience and motivation of its people.

The Opportunity: NGHP IT/DT Cybersecurity Lead

Air Products is seeking an NGHP IT/DT Cybersecurity Lead to join its team in Duba, Tabuk, Saudi Arabia. This full-time role requires 5-10 years of experience and involves leading cybersecurity activities for a significant project, ensuring compliance and operational readiness.

Key Responsibilities

• Lead and coordinate site cybersecurity activities, including site acceptance testing, cyber hygiene, readiness reviews, and implementation gap closure.
• Serve as the site-based cybersecurity point of coordination among DT, OT/ICS Cybersecurity, project management, process controls, vendors, subcontractors, and NGHC stakeholders.
• Provide day-to-day direction to cybersecurity engineers, external partners, and site-based cyber resources.
• Ensure cyber activities align with project schedules, commissioning priorities, start-up needs, and compliance milestones.
• Manage and supervise external partners engaged in designing, implementing, documenting, testing, or supporting cybersecurity solutions.
• Oversee on-site work performed by external cybersecurity implementation partners to ensure deliverables meet Air Products, NGHC, NCA, HCIS, and project requirements.
• Coordinate third-party support between CSAT, commissioning, start-up, and handover to NGHC.
• Track, review, document, and escalate vendor/subcontractor cybersecurity deliverables when gaps or delays affect compliance or project readiness.
• Serve as the interface between DT infrastructure activities and cybersecurity-related activities at the site.
• Support alignment across OT systems, industrial DMZs, site network architecture, identity/access controls, monitoring, cyber hygiene, and cyber readiness activities.
• Identify scope gaps, accountability gaps, technical blockers, and documentation gaps that could affect regulatory compliance, start-up readiness, or handover.
• Partner with site engineering, process controls, and project management teams to integrate cybersecurity activities into site work plans and commissioning sequences.
• Support handover readiness by ensuring documentation, evidence, operating assumptions, and support responsibilities are clearly defined.

Regulatory Compliance and Stakeholder Engagement

• Support execution of cybersecurity activities aligned with applicable KSA regulatory requirements, including NCA ECC, NCA OTCC, HCIS/SAIS operating permit requirements, and CNI/critical systems obligations.
• Lead collection, organization, quality review, and readiness of Proof of Compliance documentation required for HCIS and NCA compliance activities.
• Coordinate with NGHC on CSAT witnessing, evidence review, documentation feedback, and comment resolution.
• Support NGHC in preparing cybersecurity evidence packages and responses for regulatory submission.
• Ensure compliance documentation is complete, traceable, controlled, and organized for audit, regulatory review, and stakeholder approval.
• Interface regularly with the OT/ICS Cybersecurity team, including alignment with PDO on-site cyber resources.
• Conduct routine coordination meetings with OT/ICS Cybersecurity, DT, NGHC, and project stakeholders to align cyber execution activities, risks, blockers, and decisions.
• Communicate cybersecurity status, risks, issues, dependencies, and escalation items effectively to senior management and project leadership.
• Translate technical cybersecurity and compliance topics into clear, actionable updates for project executives, DT leadership, NGHC, PDO, and external partners.
• Support governance meetings, executive cyber oversight reviews, and compliance readiness discussions.

Required Qualifications and Experience

• Strong understanding of KSA cybersecurity regulations and regulatory expectations, including NCA and HCIS requirements.
• Understanding of contractual cybersecurity obligations between Air Products/APEPC and NGHC.
• 5-10 years of experience leading OT/ICS cybersecurity activities in industrial, energy, chemical, utility, critical infrastructure, or large capital project environments.
• Experience with cybersecurity site acceptance testing, proof-of-compliance documentation, regulatory evidence collection, cyber risk assessment closure, and audit readiness.

Skills and Attributes

• Ability to manage multiple concurrent priorities across project execution, stakeholder coordination, regulatory compliance, vendor management, and site readiness.
• Strong written and verbal communication skills in English; Arabic language capability is a plus.
• Ability to communicate effectively with senior management while also understanding and directing detailed day-to-day work activities at the site.
• Strong stakeholder management skills across project, engineering, cybersecurity, operations, vendors, and external/customer organizations.
• Familiarity with OT/ICS security principles, including segmentation, industrial DMZs, secure remote access, access control, hardening, monitoring, and incident readiness.
• Ability to operate in a complex, multi-party environment involving Air Products, NGHC, PDO, DT, EPC contractors, vendors, and regulatory stakeholders.