OT Security & Governance

Greenvolt Group; Madrid; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Greenvolt Group in Madrid is seeking an experienced OT Security & Governance lead to establish and maintain governance across assets, aligning policies, standards and controls for Solar PV, Biomass, Wind and BESS.

You will coordinate risk assessments, support audits, manage third-party supplier evidence, and drive continual improvement of OT governance with cross-country stakeholders.

Formación

• Bachelor's degree in engineering, Electrical Engineering, Automation, Telecommunications or a related discipline.
• Postgraduate qualification or professional certifications in cybersecurity, OT security or risk management valued.
• 4–7 years of experience in OT, SCADA, renewables, utilities or similar industrial environments.
• Experience across OT asset lifecycle including commissioning, operations and maintenance.
• Good understanding of SCADA, industrial networking, OT remote access.
• Experience in Solar PV, Wind and/or BESS environments.
• Knowledge of NIS2, IEC 62443 and ISO 27001.
• Fluent in English.

Responsabilidades

• Own, maintain and improve Greenvolt's OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS.
• Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and data-protection obligations.
• Coordinate OT risk assessments and risk analysis, review remediation plans, audits, and monitor residual-risk status.
• Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M providers; manage third-party access models.
• Govern exceptions and deviations from OT standards with documentation and risk assessment.
• Establish OT governance reporting, metrics and management information for governance forums and decision-makers.
• Act as Greenvolt's senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries.

Conocimientos

OT governance

Risk assessment

Stakeholder mgmt

Cybersecurity

Contractor management

Compliance frameworks

English fluent

Educación

Bachelor's degree in engineering

Electrical Engineering

Automation

Telecommunications

Cybersecurity certifications

Descripción del empleo

The OT Security & Governance role establishes and maintains OT governance across Greenvolt, defining standards, controls and decision frameworks and overseeing third-party compliance throughout the asset lifecycle.

The main responsibilitiesare:

• Own, maintain and continuously improve Greenvolt's OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS, control requirements, decision rights and accountabilities.
• Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and applicable data-protection obligations, translating them into practical requirements for projects and operating assets.
• Coordinate OT risk assessments and risk analysis, review and challenge remediation plans, support internal and external audits, and monitor compliance and residual-risk status through closure.
• Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M providers; challenge supplier deliverables and evidence; and govern contractor and third-party access models.
• Govern exceptions and deviations from OT standards, ensuring each is documented, risk-assessed, formally approved, time-bound, supported by compensating controls and tracked to closure.
• Establish OT governance and compliance reporting, metrics and management information; communicate trends, material risks, non-compliance and improvement priorities to governance forums and decision-makers.
• Act as Greenvolt's senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries, providing guidance and training, and promoting consistent adoption and continual improvement of governance practices.

The OT Security & Governance role establishes and maintains OT governance across Greenvolt, defining standards, controls and decision frameworks and overseeing third-party compliance throughout the asset lifecycle.

The main responsibilitiesare:

• Own, maintain and continuously improve Greenvolt's OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS, control requirements, decision rights and accountabilities.
• Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and applicable data-protection obligations, translating them into practical requirements for projects and operating assets.
• Coordinate OT risk assessments and risk analysis, review and challenge remediation plans, support internal and external audits, and monitor compliance and residual-risk status through closure.
• Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M providers; challenge supplier deliverables and evidence; and govern contractor and third-party access models.
• Govern exceptions and deviations from OT standards, ensuring each is documented, risk-assessed, formally approved, time-bound, supported by compensating controls and tracked to closure.
• Establish OT governance and compliance reporting, metrics and management information; communicate trends, material risks, non-compliance and improvement priorities to governance forums and decision-makers.
• Act as Greenvolt's senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries, providing guidance and training, and promoting consistent adoption and continual improvement of governance practices.

Requirements

• Bachelor's degree in engineering, Electrical Engineering, Automation, Telecommunications or a related discipline.
• Relevant postgraduate qualification or professional certifications in cybersecurity, OT security or risk management are highly valued.
• 4-7 years of experience in Operational Technology (OT), SCADA, OT governance, renewables, utilities or similar industrial environments.
• Experience working across the OT asset lifecycle, including commissioning, operations and maintenance and reviewing and validating technical solutions and deliverables provided by EPCs, OEMs and service providers.
• Good understanding of SCADA systems, industrial communications, OT networking and remote access.
• Experience within Solar PV, Wind and/or BESS environments.
• Experience in control centres, remote operations centres or Centres of Excellence (CoE) is highly valued.
• Strong working knowledge of NIS2, IEC 62443 and ISO 27001, together with OT risk-management and audit practices.
• Experience in renewable-energy or other industrial OT environments is highly valued.
• Fluent in English
• Strong engineering and analytical mindset.
• Ability to assess technical risks and challenge suppliers and contractors constructively.
• Strong communication and stakeholder management skills.
• Ability to challenge contractors and suppliers constructively and communicate risks, exceptions and remediation priorities clearly.
• Proactive, autonomous and solution-oriented approach.