Senior OT Security Specialist

Within our Operational Technology (OT) division in Project Delivery & Engineering, we deliver and integrate digital solutions that support renewable energy production and ensure reliable operations. As the primary provider of digital solutions for Business Unit Offshore Wind, and of Business Unit Onshore and Solar and Batteries, we manage the entire value chain, from bid acquisition to asset construction and operation, focusing on Operational Technology (OT) and IT. Cybersecurity and compliance are critical pillars in this mission.

About the Role

We are looking for a Senior OT Security Specialist - with proven track record in helping teams to implement security controls - to join our Security & Compliance team. Being part of first line of defence, we are strengthening and maintaining the implementation of preventive and reactive security measures related to ISO 27001, ISO 27019, and directives such as NIS2 and CER, all steered through our internal ISMS. In this role, you will play a key part in ensuring continuous improvement and adaptation to evolving regulations, translating complex requirements into practical solutions that create business value. The Security & Compliance team is a business enabler and your service- and collaborative mindset will ensure your success in this role.

Your Responsibilities

• Drive the implementation and ongoing maturity of the Information Security Management System (ISMS) and related compliance frameworks, including NIS2, across the organization.
• Translate ISMS requirements and best practices into clear, actionable procedures and work instructions for leadership and technical specialists such as network and server engineers.
• Plan and facilitate risk assessments, advise on synergies between identified risks, and connect findings to planned projects.
• Interface with colleagues in 1st line, internal stakeholders, and 2nd line of defence - supporting internal activities leading up to audits, during audits, and afterwards, by consulting on mitigative actions to close non-compliances findings.
• Support the organization in fulfilling compliance responsibilities to maintain a high level of compliance risk coverage.

Your work will span strategic planning, hands-on implementation, and facilitating procedures and documentation work, ensuring robust security and compliance practices.

Key Tasks

• Lead the internal adaptation and continues maturity of compliance with Vattenfall ISMS, protecting our spinning assets and ensuring compliance with ISO 27001, ISO 27019, NIS2, and CER directives.
• Coordination & Follow-up: Drive the compliance aspect of project ensuring progress, monitor deliverables, and contribute with data, presentations, and reporting.
• Documentation & Quality Assurance: Review and develop processes, guidelines, and standards to ensure accuracy, relevance, and accessibility.
• Audit support & Compliance: Participate in internal and external audits, manage deviations, and ensure systems and procedures meet directive requirements.
• Cross-functional Collaboration: guide and enable technical specialists in crafting fit-for-purpose security solutions and foster a strong, cooperative work environment.

You have experience in translating security requirements into useful and descriptive best-practices for technical experts, enabling easy adaptation. Preferably from an utility, industrial, or production environment. You are structured, analytical, and thrive in roles where you create clarity and make things happen - even in areas lacking structure. You communicate clearly at all organizational levels and enjoy being a key player in identifying, solving, and implementing solutions. You foster collaboration and enjoy enabling others making them knowledgably and capable in engineering and maturing engineering solutions.

Additionally, you bring:

• Experience with compliance, digital security, or quality systems across requirement scoping, reviewing, and assessing solutions.
• Ability to balance regulatory requirements with business feasible solutions.
• Experience with ISO 27001 and preferably NIS2, ISO 27019, or IEC 62443.
• Strong skills in conveying complex topics in a clear, practical manner.
• Experience in planning and coordinating activities in large organizations.
• Excellent written communication skills and command of the English language.
• Personal qualities: proactive, independent, structured, and collaborative.
• We welcome candidates from a wide range of educational backgrounds; and experience from the energy sector or an engineering degree is considered an advantage.