Senior Operational Technology (OT) Security Officer

Ørsted A/S; Esbjerg; On-site; DKK 900,000 - 1,300,000; Full time

Job summary

Ørsted A/S is seeking a Senior Operational Technology Security Officer to strengthen security, resilience, and compliance across OT, IT, engineering, and operations at Ørsted Bioenergy. You will translate cyber risk into business and safety impacts while coordinating with vendors to ensure practical, risk-based controls.

The role covers governance, risk assessments, secure architecture, and security awareness, with travel within Denmark.

Qualifications

• Bachelor's or higher in engineering, CS, cyber security or automation.
• Experience with OT/ICS security in production environments.
• Knowledge of Danish legislation and IEC/ISO standards mentioned.
• Fluent in Danish and English.
• Willingness to travel within Denmark.

Responsibilities

• Lead OT security governance, policies, standards and procedures.
• Assess and reduce cyber risk across OT environments.
• Support secure OT architecture: segmentation, remote access, asset visibility, logging.
• Conduct OT security risk assessments and maturity reviews.
• Collaborate with operations, engineering, IT and vendors to ensure practical controls.
• Drive OT security awareness and training.

Skills

OT security knowledge

Industrial control systems

IEC 62443 / ISO 27001

Team player

Danish & English fluency

Education

Engineering / CS / Cyber Security degree

Job description

Join us in this role where you’ll be working as a Senior Operational Technology (OT) Security Officer to strengthen the security, resilience, and compliance of Ørsted Bioenergy. In this role, you will act as a trusted security lead across OT, IT, engineering, and operations, helping protect critical systems while enabling safe, reliable, and efficient operations. Further more we are partnering with operations, engineering, maintenance, IT, and third-party vendors to ensure security controls are practical, risk-based, and compatible with operational safety and availability – and we “translate” technical cyber risk into clear business, safety, and operational impact requirements. We operate in complex, multi-site, international, or safety-critical operational environments.

Welcome to Bioenergy

You’ll be part of OT Security where you, together with your colleagues, will be working on Ørsted Danish powerplant. Our task is to protect the powerplants ability to produce electricity and heat against hacker attacks. So you need to understand Danish, when you’re out on the powerplants. We are a small team of 4 persons located in Jutland (Jylland) who works together and strive in helping each other in our daily tasks. As a team, we have an open and direct commutation where we discuss ideas strategy and ideas to develop and mature our solutions, so they are robust and they deal with the reality we face.

You’ll play an important role in:

• leading the development and continuous improvement of OT security governance, policies, standards, and procedures
• assessing, managing, and reducing cyber risk across OT environments, including industrial control systems, SCADA, PLCs, IIoT, and related networks
• defining and supporting secure OT architecture, including network segmentation, secure remote access, asset visibility, access control, logging, monitoring, and vulnerability management
• conducting OT security risk assessments, gap analyses, and maturity reviews aligned with recognised frameworks e.g. Danish legislation “Lov om styrket Beredskab i Energisektoren”, IEC 62443, ISO 27001 and relevant regulatory requirements
• partnering with operations, engineering, maintenance, IT, and third-party vendors to ensure security controls are practical, risk-based, and compatible with operational safety and availability requirements
• driving OT security awareness and training for technical and operational teams.

To succeed in the role, you:

• hold a relevant degree in Engineering, Computer Science, Cyber Security, Information Technology, Automation, or equivalent practical experience
• understand and know how to operate in ICs systems and possess understanding of 24/7 production environment
• are familiar with IT networks like, Purdue model, firewall, data diodes etc.
• hold knowledge about EIC 62433, ISO 27001 and "Lov om styrket Beredskab i Energisektoren" as we operate according to this legislation
• are a good team player and at the same are strong on being responsible of incl. conducting your own tasks – you need to be fluent in both Danish and English language as well due to nature our stake holder landscape
• are flexible - both in terms of taking on tasks outside your comfortzone, being curious in learning new areas and assist your team in whatever tasks are needed.

Some travel within Denmark to the different sites must be expected in the this role.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team, we still encourage you to apply.

As an applicant or employee, you may request reasonable work and position accommodation or adjustments via [e-mail].