Your Trusted OT/ICS Cybersecurity Consultant
Protecting critical infrastructure with expert guidance in Operational Technology and Industrial Control Systems security.
- 0+
- Years Experience
- 0+
- Projects Completed
- 0
- Continents Served
Track record
23 years, four continents
Abdulrahman Al-Safh is a highly accomplished professional with over 23 years of extensive experience in Operational Technology (OT) and Industrial Control Systems (ICS) security. His career spans multiple continents and industries, showcasing his deep expertise in safeguarding critical infrastructure.
System Integrator & Application Engineer:
Abdulrahman began his career as an OT/ICS system integrator and application engineer, where he honed his technical skills over six years in both industrial and energy sectors, laying a strong foundation and practical knowledge in OT/ICS domain.
SIEMENS Ltd. Saudi Arabia:
He spent eight impactful years at SIEMENS Ltd., Saudi Arabia, establishing cybersecurity department and holding multiple progressive roles, culminating in his position as Cybersecurity Manager. During this time, he developed a robust understanding of energy and industrial automation and cybersecurity practices.
Ernst & Young (EY):
As an OT/ICS Cybersecurity Senior Consultant at Ernst & Young, Abdulrahman worked on high-profile projects across Europe, Africa, the Middle East, and the GCC region. His contributions were instrumental in delivering tailored cybersecurity consultancy services and solutions to complex OT/ICS environments.
Saudi Electricity Company (SEC):
Serving as a key strategist and technical leader, delivering end-to-end cybersecurity consultancy across critical infrastructure and smart metering environments. Key contributions include performing comprehensive OT cybersecurity assessments for transmission substations, implementing IT/OT GRC auditing, and supporting the development and drafting of robust OT cybersecurity policies and risk frameworks. Actively drives high-level security initiatives by leading the deployment and integration of intrusion detection/prevention systems (IDS/IPS), next-generation firewalls (NGFW), endpoint protection, and access control solutions while ensuring seamless alignment with OT SOC teams, vendors, and internal SEC-NG divisions through specialized training, workshops, and strategic cross-functional engagement.
ORSTED Energy:
In Denmark, Abdulrahman served as an OT Cybersecurity Manager and senior consultant at ORSTED Energy, a global leader in renewable energy. His work focused on securing offshore windfarm mega-projects and advancing cybersecurity practices in the renewable energy sector.
Resilience:
At Resilience, Abdulrahman delivered OT/ICS cybersecurity consultancy and advisory services, helping clients strengthen the resilience of their industrial control systems and critical infrastructure against evolving threats.
KPMG — Associate Director:
As an Associate Director at KPMG, Abdulrahman led OT/ICS cybersecurity advisory engagements, guiding clients through assessments, strategy and compliance while mentoring teams and shaping the firm's operational technology security practice.
Current Role:
Abdulrahman currently works as a freelance OT/ICS cybersecurity consultant, leading strategic initiatives to safeguard critical infrastructure and industrial systems for clients worldwide. His independent practice combines technical expertise with a forward-thinking approach to address emerging cybersecurity challenges.
Areas of Expertise:
Abdulrahman has worked on OT/ICS and cybersecurity projects across various industries worldwide including, Offshore windfarm mega-projects, Power transmission and distribution plants, Refineries, Water desalination and treatment facilities, and Industrial sectors. His project portfolio reflects his ability to deliver secure and reliable consultancy services, and solutions in OT/ICS domain.
Leadership and Impact:
With over two decades of hands-on experience, Abdulrahman Al-Safh brings a wealth of practical knowledge and a deep understanding of both OT/ICS and cybersecurity. His leadership style is characterized by a strategic mindset, technical acumen, and a proactive approach to mitigating risks in industrial environments. Abdurrahman's contributions have consistently enhanced operational resilience and cybersecurity maturity for organizations across multiple sectors.
Companies I Worked With
Countries I Worked In
- Saudi Arabia
- Denmark
- Spain
- Italy
- Turkey
- Taiwan
- Morocco
- Tunisia
- Germany
- Finland
My Services
Comprehensive OT/ICS cybersecurity solutions tailored to your needs
Prices and discount rate is subjected to project duration.
RFP / RFI / RFQ Writing
Writing request for proposal, request for information and request for quotation.
Technical & Financial Proposals
Writing technical proposal & financial proposal.
Consultancy — With Site Visit
On-site consultancy services including a site visit.
Consultancy — Without Site Visit
Remote consultancy services without a site visit.
Training Course
Training course tailored to client requirements (price per person).
Sales & Pre-sales Training
Sales and pre-sales training tailored to client requirements (price per person).
Client Meeting Support
SME support during client meetings.
Awareness Session — Online
Online cybersecurity awareness session.
Awareness Session — On-premises
On-premises awareness session with practical, hands-on experience.
HR OT Interview Services
Technical interviewing and candidate assessment support for OT/ICS roles.
Consultancy Service for Consultant
Mentoring and advisory support for fellow consultants on OT/ICS cybersecurity engagements.
OTCC Compliance Services
Guidance and support to meet the OT Cybersecurity Controls (OTCC) requirements.
Pen Testing Service
Penetration testing for OT/ICS environments, scoped to your systems and objectives.
Code Review Service
Security-focused review of application, PLC or automation code, scoped to your codebase.
Evaluate / Audit Delivered Risk Assessment
Independent evaluation and audit of a risk assessment already delivered to you.
OT/ICS Network Architecture Review
Review of OT/ICS network architecture against segmentation and defence-in-depth best practices.
Consultancy for Company Starting OT Business
Advisory for companies launching an OT/ICS cybersecurity practice or service line.
Not sure which one you need?
Describe the situation and you will get a recommendation and a fixed quote — not a discovery call.
How it runs
A short engagement, run like a project
No open-ended discovery. Every engagement is scoped, evidenced and handed over.
Scope
A call to establish the site, the standards in play and the outcome you need. You leave with a fixed scope and a price.
Assess
On-site or remote assessment against ISA/IEC 62443 — architecture, asset inventory, conduits and zones, and the gaps that actually carry risk.
Deliver
Findings ranked by consequence, not by CVSS, with a remediation plan your engineers and your budget can both live with.
Support
Design review, vendor challenge, tender evaluation and meeting support while the work is implemented.