IT and digital

Join us in this role where you’ll control and manage activities towards security operations center, such as vulnerability management, risk treatment and operational implementation of security controls. You’ll be working across regional engineering, Generation Digital & Technology operations, and cybersecurity teams to protect our critical OT infrastructure. You will ensure that cyber risks are proactively managed and mitigated, operational cybersecurity controls are continuously improved, and regulatory compliance is demonstrated through reliable, evidence-based processes.

Welcome to Generation Digital & Technology OT Systems Department

You’ll be part of the OT Guard function within OT Systems Operations, where you, together with a team of SCADA engineers and cybersecurity experts, will ensure secure and reliable OT environments across our global wind farm fleet. You’ll act as the focal point for OT vulnerability management and secure operations, driving continuous improvement and leading incident and risk response processes in collaboration with our central security operations center and site teams.

You’ll play an important role in:

• Acting as the operational owner for vulnerability management processes in OT systems, aligning with ISMS controls and compliance requirements
• Acting as a focal point between the security operations center and OT Guard, including handling escalations
• Driving and maturing the vulnerability lifecycle in coordination with regional engineering and OT operations (risk mitigation assessment, patch planning, mitigation)
• Creating and maintaining OT vulnerability metrics and control documentation
• Supporting implementation of asset inventory logic tied to patch groups, IP zones, and risk zones across SCADA and OT networks
• Defining and updating work instructions and operational procedures for OT vulnerability handling, including ticket handling workflows
• Engaging with suppliers and asset owners on vulnerability advisories, SLA alignment, and incident response
• Participating in audits and regulatory readiness efforts (e.g. NIS/NIS2, ISO27001, IEC62443), ensuring traceability and evidence for vulnerability controls

To succeed in the role, you:

• Have an engineering/Cyber Security or similar degree
• Have experience in vulnerability management and security operations, ideally in critical infrastructure or OT-heavy environments
• Bring deep technical knowledge of cybersecurity across TCP/IP networks, operating systems, and ICS/SCADA environments
• Have experience with tooling and standards such as

o   IDS, SIEM, Antivirus, Ticket management systems

o   ISO27k, IEC62443

o   NIS EU, NIS-CAF, NERC CIP, BEK, BSI KRITIS

• Are comfortable assessing vulnerabilities and risks, and guiding decision-making around patching, mitigation, or compensating controls
• Can manage operational processes and services with multiple internal and external stakeholders (e.g. suppliers, security vendors, operations teams and compliance functions)
• Are familiar with incident, problem, change management processes and can integrate vulnerability workflows into them
• Have excellent analytical and communication skills, and can translate complex cybersecurity issues into actionable plans and reports
• Are structured, self-driven, a team player and comfortable operating in a fast-paced, international environment

Join a world leader in green energy 
Ørsted is a global leader in offshore wind energy and ranked the world’s most sustainable energy company. To be a frontrunner, we invest significantly in employee development, and from the moment you join us, we’ll support your personal and professional growth. Here, you’ll get the opportunities that will unleash your full potential, and you’ll experience a collaborative, diverse, and dynamic work environment.  

Shape the future with us

Send your application to us as soon as possible. We’ll be conducting interviews on a continuous basis and reserve the right to take down the advert when we’ve found the right candidate.

As an applicant or employee, you may request reasonable work and position accommodation or adjustments via accommodation@orsted.com.

Please note that for your application to be taken into consideration, you must submit your application via our online career pages and answer the screening questions relevant to your country. We don't take applications or inquiries from external recruiters or agencies into account for this position.