OT Security & Governance

Greenvolt; Madrid; On-site; EUR 70,000 - 90,000; Full time

Job summary

Greenvolt is seeking an OT Security & Governance specialist to establish and maintain OT governance across its asset lifecycle, defining standards and controls for Solar PV, Biomass, Wind and BESS. This role requires 4-7 years in OT, SCADA or renewables, a strong engineering background, fluent English, and the ability to challenge suppliers while improving governance practices.

You will collaborate with EPCs, OEMs and O&M providers, develop reporting, metrics and continuous improvement plans,

Qualifications

• Bachelor’s degree in engineering or related discipline.
• 4-7 years of experience in OT, SCADA, OT governance, renewables, utilities or similar industrial environments.
• Strong understanding of SCADA systems, industrial communications, OT networking and remote access.
• Fluent in English.

Responsibilities

• Own, maintain and improve OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS, control requirements, decision rights and accountabilities.
• Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and applicable data-protection obligations, translating them into practical requirements for projects and operating assets.
• Coordinate OT risk assessments and risk analysis, review and challenge remediation plans, support internal and external audits, and monitor compliance and residual-risk status through closure.
• Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M providers; challenge supplier deliverables and evidence; and govern contractor and third-party access models.
• Govern exceptions and deviations from OT standards, ensuring each is documented, risk-assessed, formally approved, time-bound, supported by compensating controls and tracked to closure.
• Establish OT governance and compliance reporting, metrics and management information; communicate trends, material risks, non-compliance and improvement priorities to governance forums and decision-makers.
• Act as Greenvolt’s senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries, providing guidance and training, and promoting consistent adoption and continual improvement of governance practices.

Skills

OT governance

Cybersecurity requirements

Risk management

Stakeholder management

Compliance frameworks

Vendor/contractor management

OT networking

SCADA familiarity

Renewables experience

Analytical mindset

English fluency

Education

Bachelor’s degree in engineering

Electrical Engineering

Automation

Telecommunications

Postgraduate qualification in cybersecurity

OT security certification

Risk management certification

Tools

SCADA systems

Industrial networks

NIS2 compliance

Remote access controls

Job description

The OT Security & Governance role establishes and maintains OT governance across Greenvolt, defining standards, controls and decision frameworks and overseeing third-party compliance throughout the asset lifecycle.

The main responsibilitiesare:

• Own, maintain and continuously improve Greenvolt’s OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS, control requirements, decision rights and accountabilities.
• Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and applicable data-protection obligations, translating them into practical requirements for projects and operating assets.
• Coordinate OT risk assessments and risk analysis, review and challenge remediation plans, support internal and external audits, and monitor compliance and residual-risk status through closure.
• Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M providers; challenge supplier deliverables and evidence; and govern contractor and third-party access models.
• Govern exceptions and deviations from OT standards, ensuring each is documented, risk-assessed, formally approved, time-bound, supported by compensating controls and tracked to closure.
• Establish OT governance and compliance reporting, metrics and management information; communicate trends, material risks, non-compliance and improvement priorities to governance forums and decision-makers.
• Act as Greenvolt’s senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries, providing guidance and training, and promoting consistent adoption and continual improvement of governance practices.

• Bachelor’s degree in engineering, Electrical Engineering, Automation, Telecommunications or a related discipline.
• Relevant postgraduate qualification or professional certifications in cybersecurity, OT security or risk management are highly valued.
• 4-7 years of experience in Operational Technology (OT), SCADA, OT governance, renewables, utilities or similar industrial environments.
• Experience working across the OT asset lifecycle, including commissioning, operations and maintenance and reviewing and validating technical solutions and deliverables provided by EPCs, OEMs and service providers.
• Good understanding of SCADA systems, industrial communications, OT networking and remote access.
• Experience within Solar PV, Wind and/or BESS environments.
• Experience in control centres, remote operations centres or Centres of Excellence (CoE) is highly valued.
• Strong working knowledge of NIS2, IEC 62443 and ISO 27001, together with OT risk-management and audit practices.
• Experience in renewable‑energy or other industrial OT environments is highly valued.
• Fluent in English
• Strong engineering and analytical mindset.
• Ability to assess technical risks and challenge suppliers and contractors constructively.
• Strong communication and stakeholder management skills.
• Ability to challenge contractors and suppliers constructively and communicate risks, exceptions and remediation priorities clearly.
• Proactive, autonomous and solution-oriented approach.