Lead- Digital Security (UAEN)

About EWEC

EWEC (Emirates Water and Electricity Company) is the sole procurer and supplier of water and electricity in the emirate of Abu Dhabi. EWEC drives the planning, forecasting, purchasing, and system despatch services of water and electricity. EWEC fulfils these vital responsibilities through the short-term and long-term balancing of bulk supply and demand for distribution companies and authorities in Abu Dhabi and other Emirates. EWEC is supporting the government of Abu Dhabi and the government of the UAE by enabling the reduction of cost whilst also providing the increased security of supply that comes from a cleaner, larger, and more integrated system.

EWEC is mandated to implement strategic initiatives that will achieve the 60 per cent clean energy target outlined in the Abu Dhabi Department of Energy's (DoE) Clean Energy Strategic Target 2035 for Electricity Production in Abu Dhabi, in addition to enabling the achievement of UAE Water Security Strategy 2036, UAE Energy Strategy by 2050, and the UAE Net Zero by 2050 strategic initiative. EWEC is accelerating Abu Dhabi and the UAE’s energy transition by diversifying the country’s energy mix through developing and deploying renewable and clean energy as well as low-carbon intensive water desalination capacities. EWEC is part of ADQ, one of the region’s largest holding companies with a broad portfolio of major enterprises spanning key sectors of Abu Dhabi’s diversified economy. For more information, please visit www.ewec.ae.

The Power Network Operability Lead manages power system operability planning within the Operations directorate, with a primary focus on the 1-3-year horizon and advisory input beyond three years. The role defines and maintains future operability envelopes (thermal, voltage, fault level, stability and reserve limits), leads the annual multi-year operability assessment, and develops and updates restoration and black-start plans. The Lead ensures that demand growth, new capacity and decarbonization initiatives remain operable, provides clear recommendations to Power Planning & Studies, Outage Management and Integrated Planning, and collaborates closely with internal and external stakeholders to support system reliability and EWEC’s energy transition objectives.

Job Specific Responsibilities:

• Assist in developing, reviewing, and maintaining cybersecurity policies, standards, and procedures for IT and OT systems.
• Conduct risk assessments, vulnerability assessments, and compliance checks in line with UAE IA Regulation, ISO 27001, NIST, and other applicable frameworks.
• Coordinate and follow up on internal and external cybersecurity audits, ensuring timely closure of findings.
• Prepare compliance and risk reports for management and contribute to Audit and Risk Committee (ARC) reporting.
• Perform security monitoring, analysis, and incident response through SOC processes and tools.
• Investigate security alerts, identify threats, and take corrective actions to contain and remediate incidents.
• Support vulnerability and patch management activities for IT and OT systems.
• Participate in threat hunting, malware analysis, and digital forensics activities as needed.
• Ensure cybersecurity requirements are embedded into projects, systems, and vendor contracts.
• Support business continuity (BCM) and disaster recovery (DR) planning and exercises from a security perspective.
• Maintain accurate documentation of cybersecurity processes, incidents, and compliance evidence.
• Work with other IT verticals (Applications, Data, Infrastructure, Service Management, Strategy) to ensure security-by-design and secure operations.
• Mentor and guide junior cybersecurity team members.
• Stay up to date with emerging threats, vulnerabilities, and relevant security technologies.
• Promote cybersecurity awareness and training initiatives across the organization.
• Ensure timely reporting of security incidents and achievement of KPIs such as UAE IA compliance and system availability.
• Foster collaboration across internal teams and with external partners and vendors.

Experience

• 6+ years of relevant cybersecurity experience, preferably with exposure to both governance/compliance and operational security.
• Experience in critical infrastructure sectors (energy, utilities, or similar) is an advantage.
• Hands-on experience with IT and OT security environments.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or a related field.
• Professional certifications such as CISSP, CISM, CEH, CompTIA Security+, ISO 27001 Lead Implementer/Auditor, or equivalent are preferred.