OT Cyber Operations

Greenvolt; Madrid; On-site; EUR 55,000 - 90,000; Full time

Job summary

Greenvolt seeks an OT Cyber Operations professional to oversee assurance of OT cybersecurity controls, vulnerabilities, asset visibility and monitoring across the organization.

You will work with OT and security teams to define the OT SOC, coordinate incident response, vulnerability management and continuous improvement of OT resilience in multiple countries.

Qualifications

• Bachelor's degree or higher in Engineering, IT, CS, Telecommunications or related discipline.
• IRCP (Incident Response Certification) is a plus.
• 5+ years of experience in cybersecurity operations, vulnerability management, security monitoring or incident response.
• Experience with monitoring processes and vulnerability management activities.
• Experience with SIEM platforms, security monitoring tools and incident management processes.

Responsibilities

• Maintain and enhance OT visibility, asset inventories and monitoring capabilities across Greenvolt's OT environments.
• Coordinate OT SOC and CSIRT for comprehensive incident response coverage.
• Oversee the vulnerability management lifecycle and risk-based remediation tracking.
• Support development and continuous improvement of OT resilience and recovery procedures.
• Define OT monitoring requirements and playbooks to ensure effective detection and logging.
• Coordinate OT access governance and onboarding/offboarding with vendors and third parties.
• Assist OT incident response and investigations, maintaining procedures and testing programs across countries.
• Contribute to the OT cybersecurity operating model, governance and risk-based prioritization.

Skills

Cybersecurity operations

Vulnerability management

Security monitoring

Incident response

OT/ICS familiarity

SIEM platforms

Stakeholder management

Vendor access control

English fluency

Analytical thinking

Education

Bachelor's degree in Engineering/IT/CS/Telecommunications

IRCP Certification

Tools

Microsoft Sentinel

Microsoft Defender XDR

Job description

The OT Cyber Operations must Assurance Operational oversight of OT cybersecurity controls, vulnerabilities, asset visibility and monitoring processes. Working closely with operational stakeholders and defining the OT SOC, to help ensure the operational cyberrisks are identified, monitores and addressed consistently across the organization.

The main responsibilitiesare:

• Maintain and enhance visibility across Greenvolt's OT environments, ensuring accurate asset inventories, classification and monitoring capabilities are in place.
• Coordinate OT SOC and CSIRT to gain a full coverage for incident response across the organization
• Coordinate OT vulnerability management lifecycle, including vulnerability tracking, remediation follow-up and support for risk assessment processes across operational assets. Maintaining visibility of identified vulnerabilities, prioritising remediation with asset owners, and tracking actions through to risk-based closure
• Support the development and continuous improvement of OT resilience capabilities, including business continuity plans, recovery procedures and operational readiness activities.
• Define and coordinate OT monitoring and detection requirements and playbooks, supporting the implementation and effectiveness of security monitoring, logging and incident detection capabilities.
• Support the integration and operation of OT cybersecurity monitoring services, ensuring effective collaboration with internal teams and external providers.
• Coordinate OT access governance activities, supporting the secure management of vendor, contractor and third-party access to operational technology environments.
• Support OT incident response and investigation activities, maintaining procedures, response plans and testing programmes to ensure readiness across all countries.
• Contribute to the operational execution of OT cybersecurity controls, supporting monitoring, vulnerability management and incident response activities across Greenvolt's OT environments.
• Establish and maintain the OT cybersecurity operating model, governance processes and risk-based priorities, ensuring that material risks, control gaps and remediation decisions are documented and escalated to the appropriate stakeholders.
• Define, monitor and report OT cybersecurity performance indicators, including asset visibility, vulnerability ageing, remediation progress, monitoring coverage, incident trends, access reviews and response readiness.
• Coordinate OT cybersecurity control assessments, audits and compliance activities, maintaining evidence of control effectiveness and overseeing the timely remediation of identified findings.

• Bachelor's degree in Engineering, Information Technology, Computer Science, Telecommunications or a related discipline.
• (Valuable) IRCP (Incident Response Certified and/or Master degree Cyber Defense
• 5+ years of experience in cybersecurity operations, vulnerability management, security monitoring, incident response or related functions.
• Experience supporting the operational execution of cybersecurity controls, monitoring processes and vulnerability management activities.
• Experience working with SIEM platforms, security monitoring tools and incident management processes.
• Familiarity with Operational Technology (OT) or industrial environments, including SCADA systems.
• Experience coordinating with SOC teams, service providers and operational stakeholders.
• Experience managing or reviewing third-party and vendor access in regulated or operational environments.
• Knowledge of Microsoft Sentinel, Microsoft Defender XDR or similar security platforms is highly valued.
• Fluent in English
• Strong analytical and problem-solving skills.
• Effective communication and stakeholder management.
• Proactive and continuous improvement mindset.