OT Automation Cybersecurity Specialist

VERBUND Green Power Iberia; Madrid; On-site; EUR 70,000 - 95,000; Full time

Job summary

VERBUND Green Power Iberia seeks an OT Automation Cybersecurity Specialist to support the definition and implementation of cybersecurity controls across the OT and automation environments of our power plants, contributing to the Spanish portfolio's NIS2 compliance and VERBUND's ISMS guidelines.

Your role involves coordinating NIS2-related workstreams, collaborating with HQ and external partners to deploy OT asset discovery, monitoring and PAM solutions, and supporting audits and remediation to

Qualifications

• Degree in telecommunication, automation, electronic or related field.

Responsibilities

• Define and implement OT cybersecurity architecture for power plants.

Skills

OT cybersecurity

NIS2

ISMS

SCADA

Asset discovery

PAM

Audits

Education

Telecommunication degree

Automation degree

Tools

SCADA tools

Monitoring tools

Job description

VERBUND is Austria's leading energy company. With around 3,200 employees, we trade in electricity in 12 countries. VERBUND is active in everything from power generation and transport to international trade and sales.

We are the power of change! We rely on the power of water, wind and sun like no other in Europe. We are also building green hydrogen as a future technology.

We are committed to fostering diversity and inclusion. All applicants and employees are valued for their contributions, and given equal opportunities to grow and succeed, without regard to race, color, religion, national origin, sexual orientation, gender identity or expression, family status, age, disability or any other individual characteristic. We strive to create an environment where all employees feel supported, respected, and empowered to succeed.

The OT Automation Cybersecurity Specialist will support the definition and implementation of cybersecurity controls across the OT and automation environments of the power plants and contributes to the Spanish portfolio's compliance with NIS2 and Verbund's internal cybersecurity and ISMS guidelines. The position works under the direction of the IT/OT Systems Manager, focusing on the OT/automation cybersecurity dimension of the portfolio.

Your main responsibilities will be:

• Support the IT/OT Systems Manager in the definition and implementation of the OT cybersecurity architecture for the power plants.
• Coordinate the technical execution of NIS2-related compliance workstreams (asset inventory, risk assessment, network segmentation, monitoring) across the VGP Iberia portfolio.
• Collaborate with Head Quarters and external partners to define and roll out OT asset discovery, monitoring and remote-access control (PAM) solutions.
• Support internal and external audits, gap analyses and the documentation required to demonstrate NIS2 and ISMS compliance.
• Coordinate subcontractors, cybersecurity vendors and telecom providers on cybersecurity-related implementation projects for new and existing power plants.
• Monitor OT/IT cybersecurity incidents and support remediation, coordinating with the corporate CERT/SOC as applicable.
• Track regulatory developments related to NIS2 and its national transposition, flagging impacts on the Spanish operations.

Your profile:

• Degree in telecommunication, automation, electronic or related field.
• Cybersecurity-related certification or specialization will be a plus (e.g. CISSP, GICSP, ISA/IEC 62443, ISO 27001 Lead Implementer/Auditor).
• More than 2 years’ experience in OT/ICS cybersecurity or industrial IT, ideally in power generation or critical infrastructure.
• Knowledge of industrial telecommunication architectures and protocols used in power generation plants.
• Hands-on experience with OT asset discovery/monitoring tools and SCADA environments.
• Working knowledge of NIS2 and ISO 27001/ISMS frameworks and how they apply to OT environments.
• Detail-oriented and with initiative in driving compliance workstreams to closure.