Senior Risk Analyst

JD Ross Energy; Kolding; Hybrid; DKK 673,000 - 972,000; Full time

Job summary

JD Ross Energy is seeking an experienced Senior OT Risk Assessment Analyst to lead risk assessments across industrial OT environments. The role focuses on identifying, assessing, and mitigating risks affecting safety, production, and business continuity.

You will apply IEC 62443 methodologies, work with engineering and operations teams, and communicate complex risks to stakeholders. The position is based in Kolding with hybrid onsite/offsite arrangements and travel for workshops.

Qualifications

• Proven experience leading OT/ICS cybersecurity risk assessments.
• Strong knowledge of IEC 62443 and OT risk management frameworks.
• Experience with SCADA, PLC, HMI and OT networks.
• Fluent English communication.

Responsibilities

• Lead OT cyber and operational risk assessments across industrial environments.
• Apply IEC 62443 methodologies, particularly IEC 62443-3-2.
• Assess risks related to SCADA systems, PLCs, HMIs, engineering workstations, OT networks, and remote/vendor access.
• Facilitate risk workshops with technical and operational stakeholders.
• Analyse OT architectures, dependencies, and system vulnerabilities.
• Develop and improve OT risk registers and management reporting.
• Translate identified risks into actionable remediation and engineering requirements.

Skills

OT/ICS risk

IEC 62443

stakeholder communication

SCADA/OT networks

Job description

We are looking for an experienced Senior OT Risk Assessment Analyst to lead cyber and operational risk assessments across complex industrial and operational technology (OT) environments. This role will focus on identifying, assessing, and managing risks that could impact safety, production, availability, environmental operations, and overall business continuity.

The successful candidate will have a strong background in OT/ICS cybersecurity and hands-on experience conducting end-to-end risk assessments within industrial environments. You will work closely with engineering, operations, and security stakeholders to identify threats, assess vulnerabilities, facilitate risk workshops, and develop practical risk treatment recommendations.

Key Responsibilities

• Lead OT cyber and operational risk assessments across industrial environments.
• Apply IEC 62443 methodologies, particularly IEC 62443-3-2.
• Assess risks related to SCADA systems, PLCs, HMIs, engineering workstations, OT networks, and remote/vendor access.
• Facilitate risk workshops with technical and operational stakeholders.
• Analyse OT architectures, critical dependencies, and system vulnerabilities.
• Develop and improve OT risk registers and management reporting.
• Translate identified risks into actionable remediation and engineering requirements.

Requirements

• Proven experience leading OT/ICS cybersecurity risk assessments.
• Strong knowledge of IEC 62443 and OT risk management frameworks.
• Experience with SCADA, PLC, HMI, industrial networks, and operational technology environments.
• Ability to communicate technical risks and business impacts to both technical and non-technical stakeholders.
• Fluent English communication skills.

Preferred Experience

• Energy, utilities, renewables, or other critical infrastructure sectors.
• IEC 62443, CISSP, CISM, CRISC, GICSP, or related certifications.
• ISO 27001 / ISO 27005 knowledge and experience.

Location: Kolding, Denmark (Hybrid)

Contract: November 2026 - November 2027

Working Pattern: Approximately 2 days onsite per week, with occasional travel for workshops