Senior Operational Technology (OT) Security Officer

Orsted Asia Pacific; Esbjerg; Hybrid; DKK 900,000 - 1,300,000; Full time

Job summary

Ørsted Bioenergy is seeking a Senior OT Security Officer to strengthen security, resilience, and compliance across OT/IT environments. You will lead governance, assess cyber risk for industrial control systems, and collaborate with operations, engineering, and vendors to implement practical, risk-based controls.

The role requires Danish and English fluency, flexibility to travel Denmark-wide, and a hands-on approach to secure industrial networks and production continuity.

Qualifications

• Degree in Engineering, Computer Science, Cyber Security, IT, Automation, or related field.
• Experience with ICs systems and 24/7 production environment.
• Familiarity with IT networks (Purdue model, firewall, data diodes).
• Knowledge of IEC 62443, ISO 27001, and Danish energy legislation.
• Fluent in Danish and English.

Responsibilities

• Lead OT security governance, policies, standards, and procedures.
• Assess and reduce cyber risk across OT environments.
• Define secure OT architecture: segmentation, remote access, asset visibility, logging.
• Conduct OT risk assessments and maturity reviews per frameworks.
• Partner with operations, engineering, maintenance, IT, and vendors to ensure practical controls.
• Drive OT security awareness and training.

Skills

OT security governance

Risk assessment

Industrial control systems security

Networking and IT security

English & Danish language

Education

Engineering/CS/Cyber Security or related field

Job description

Join us in this role where you’ll be working as a Senior Operational Technology (OT) Security Officer to strengthen the security, resilience, and compliance of Ørsted Bioenergy. In this role, you will act as a trusted security lead across OT, IT, engineering, and operations, helping protect critical systems while enabling safe, reliable, and efficient operations. Further more we are partnering with operations, engineering, maintenance, IT, and third-party vendors to ensure security controls are practical, risk-based, and compatible with operational safety and availability – and we “translate” technical cyber risk into clear business, safety, and operational impact requirements. We operate in complex, multi-site, international, or safety-critical operational environments.

Welcome to Bioenergy

You’ll be part of OT Security where you, together with your colleagues, will be working on Ørsted Danish powerplant. Our task is to protect the powerplants ability to produce electricity and heat against hacker attacks. So you need to understand Danish, when you’re out on the powerplants. We are a small team of 4 persons located in Jutland (Jylland) who works together and strive in helping each other in our daily tasks. As a team, we have an open and direct commutation where we discuss ideas strategy and ideas to develop and mature our solutions, so they are robust and they deal with the reality we face.

You’ll play an important role in:

• leading the development and continuous improvement of OT security governance, policies, standards, and procedures
• assessing, managing, and reducing cyber risk across OT environments, including industrial control systems, SCADA, PLCs, IIoT, and related networks
• defining and supporting secure OT architecture, including network segmentation, secure remote access, asset visibility, access control, logging, monitoring, and vulnerability management
• conducting OT security risk assessments, gap analyses, and maturity reviews aligned with recognised frameworks e.g. Danish legislation “Lov om styrket Beredskab i Energisektoren”, IEC 62443, ISO 27001 and relevant regulatory requirements
• partnering with operations, engineering, maintenance, IT, and third-party vendors to ensure security controls are practical, risk-based, and compatible with operational safety and availability requirements
• driving OT security awareness and training for technical and operational teams.

To succeed in the role, you:

• hold a relevant degree in Engineering, Computer Science, Cyber Security, Information Technology, Automation, or equivalent practical experience
• understand and know how to operate in ICs systems and possess understanding of 24/7 production environment
• are familiar with IT networks like, Purdue model, firewall, data diodes etc.
• hold knowledge about EIC 62433, ISO 27001 and "Lov om styrket Beredskab i Energisektoren" as we operate according to this legislation
• are a good team player and at the same are strong on being responsible of incl. conducting your own tasks – you need to be fluent in both Danish and English language as well due to nature our stake holder landscape
• are flexible - both in terms of taking on tasks outside your comfortzone, being curious in learning new areas and assist your team in whatever tasks are needed.

Some travel within Denmark to the different sites must be expected in the this role.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team, we still encourage you to apply.

As an applicant or employee, you may request reasonable work and position accommodation or adjustments via [e-mail].