Senior Specialist, Enterprise Cyber Security

Freelio; Aarhus; On-site; DKK 900,000 - 1,300,000; Full time

Job summary

Vestas seeks a Cybersecurity Strategy Execution Specialist to shape and mature the company’s enterprise cybersecurity program. You will connect risk management, architecture, compliance, and business priorities to enable secure growth and regulatory compliance.

This role sits within a global, forward-looking digital security function. You will partner with IT, OT, and business units to deliver a unified cyber strategy, governance, and actionable insights, supporting robust risk management and

Qualifications

• Experience building cybersecurity strategy across IT, OT and digital security domains.
• Ability to translate risk insights into strategic priorities and leadership communication.
• Familiarity with regulatory frameworks (NIS2, GDPR, etc.) and industry standards.
• Proven track record delivering governance models and operating models in large organisations.

Responsibilities

• Shape enterprise-wide cybersecurity strategy aligned with business objectives and regulatory requirements.
• Define and mature operating models integrating IT, OT, security architecture, and digital security domains.
• Establish risk-based prioritization models to guide investments and initiatives.
• Orchestrate execution via governance forums, OKRs, and performance reporting (e.g., QDRs).
• Ensure alignment between cyber strategy, enterprise risk management, and business processes.

Skills

Cybersecurity strategy

Enterprise risk management

Governance frameworks

ISO 27001

NIST CSF

GDPR & NIS2

Data-driven decision making

OKRs & KPIs

Stakeholder management

Executive communication

Job description

Management | Full-Time Digital Solutions & Development > Digital Solutions > Security & Technology Platforms

Do you bring extensive experience in cybersecurity strategy, enterprise risk management, and governance? Are you interested in shaping cybersecurity plans that connect organizational goals with robust digital safeguards? We are seeking a Cybersecurity Strategy Execution Specialist to join our global digital team, playing a key role in defining, maturing, and operationalizing cybersecurity strategy across the enterprise. This role sits at the heart of our transformation towards a holistic, integrated cybersecurity approach, connecting risk management, architecture, compliance, and business priorities. You will help ensure cybersecurity becomes a value-enabling function, supporting business growth, resilience, and regulatory compliance in a company committed to building a sustainable future. We take a modern, risk-based and data-driven approach to cybersecurity. By integrating strategy with quantitative risk management, architecture, and regulatory frameworks, we enable better decision-making and clearer prioritization of security investments - both internally and for our customers. As part of this journey, we are now looking for a Cybersecurity Strategy Execution Specialist to join a diverse, forward-thinking, and purpose-driven organization. We aim to deliver a unified cyber strategy, clear governance, and actionable insights, ensuring alignment across IT, OT, and digital domains while earning trust with stakeholders, customers, and regulators. You will join a maturing and growing Enterprise Cyber Security organization, where you will play a central role in transforming cybersecurity into a business enabler, strategic differentiator, and trusted partner across Vestas.

Responsibilities

• Shape Vestas' enterprise-wide cybersecurity strategy, ensuring alignment with business objectives, enterprise risk appetite, and regulatory requirements
• Define and mature operating models that integrate IT, OT, security architecture and digital security domains
• Establish and apply risk-based prioritization models to guide strategic investments and initiatives
• Orchestrate and track execution of the cybersecurity strategy through governance forums, OKRs, and performance reporting (e.g., QDRs)
• Ensure alignment between cyber strategy, enterprise risk management, and business processes, enabling consistent decision-making

Qualifications

• Bring experience within cybersecurity strategy, enterprise security, or risk & governance functions
• Demonstrated experience with cyber strategy development, operating models, and governance frameworks
• Solid understanding of industry standards and frameworks (e.g., ISO 27001, NIST CSF, IEC 62443, FAIR, ISO 31000)
• Experience working with regulatory requirements such as NIS2, CRA, GDPR, or similar
• Experience translating risk insights into strategic priorities and executive-level communication
• Familiarity with data-driven decision-making, dashboards, and performance management (e.g., OKRs, KPIs)

Competencies

• Effective strategic thinking with the ability to connect vision to execution
• Solid stakeholder management skills, with experience working across global and cross-functional teams
• The ability to bridge technical, risk, and business perspectives into one coherent narrative
• A structured and pragmatic approach to solving complex challenges
• Clear and effective communication, with the ability to engage senior stakeholders and build consensus
• A collaborative mindset and motivation to build and scale capabilities across the organization
• The ability to operate effectively in a shifting and evolving regulatory and threat landscape
• Deep interest in renewable energy, sustainable practices, and continuous improvement

What We Offer

• A key strategic role shaping how cybersecurity supports business growth and resilience
• A collaborative, international environment with exposure to senior leadership and cross-functional teams
• Opportunities to contribute to enterprise-wide decisions and strategy direction
• Robust professional growth within cybersecurity strategy, governance, and enterprise risk
• A culture that values Simplicity, Accountability, Motivation & Collaboration
• Flexible working conditions supporting a healthy work-life balance
• A compensation package and benefits aligned with your qualifications and experience

DEIB Statement

At Vestas, we recognize the value of diversity, equity, and inclusion in driving innovation and success. We strongly encourage individuals from all backgrounds to apply, particularly those who may hesitate due to their identity or feel they do not meet every criterion. As our CEO states, "Expertise and talent come in many forms, and a diverse workforce enhances our ability to think differently and solve the complex challenges of our industry". Your unique perspective is what will help us powering the solution for a sustainable, green energy future.

About Vestas

Vestas is the energy industry’s global partner on sustainable energy solutions. We are specialised in designing, manufacturing, installing, and servicing wind turbines, both onshore and offshore. Across the globe, we have installed more wind power than anyone else. We consider ourselves pioneers within the industry, as we continuously aim to design new solutions and technologies to create a more sustainable future for all of us. With more than 173 GW of wind power installed worldwide and 40+ years of experience in wind energy, we have an unmatched track record demonstrating our expertise within the field. With 29,000 employees globally, we are a diverse team united by a common goal: to power the solution – today, tomorrow, and far into the future. Vestas promotes a diverse workforce which embraces all social identities and is free of any discrimination. We commit to create and sustain an environment that acknowledges and harvests different experiences, skills, and perspectives. We also aim to give everyone equal access to opportunity. To learn more about our company and life at Vestas, we invite you to visit our website at www.vestas.com and follow us on our social media channels. We also encourage you to join our Talent Universe to receive notifications on new and relevant postings.