OT Cybersecurity Architect

Fazer; Vantaa; On-site; EUR 90,000 - 130,000; Full time

Job summary

Fazer seeks an OT Cybersecurity Architect to lead cybersecurity across Fazer's production operations in the Nordics and Baltics. You will own the Group OT cybersecurity programme, set priorities, and drive a roadmap aligned with our information security strategy.

This role focuses on delivering secure OT architecture for new and existing sites, including the Lahti factory rollout. You will collaborate with Factory Operations, Group ICT and site teams to balance cybersecurity with production

Qualifications

• At least 10 years combined experience in cybersecurity and production OT or industrial control environments.
• Proven track record establishing and leading cybersecurity programmes, governance and operating models.
• Experience driving change across multiple sites, stakeholders and suppliers.
• Strong knowledge of IEC 62443 and relevant risk management and compliance frameworks, and turning them into practical ways of working.
• Deep understanding of OT security architecture and controls with the ability to challenge designs.
• Relevant security certifications are considered an asset.

Responsibilities

• Develop OT security requirements, standards and governance; clarify responsibilities between Factory Operations and Group ICT.
• Coordinate site-specific improvement plans, support local implementation, report progress and gaps.
• Coordinate OT risk assessments and provide management with risk treatment recommendations.
• Define security requirements for OT architecture, production investments and suppliers; review significant designs and changes.
• Develop monitoring, incident response and recovery requirements; support investigations during incidents.
• Set requirements for OT asset lifecycle management, patching, backups and recovery.
• Support OT cybersecurity audits and build internal capability across sites.

Skills

OT cybersecurity

Governance

Change management

IEC 62443

OT architecture

Supplier management

Incident response

Job description

As the OT Cybersecurity Architect, you will lead the development of cybersecurity across Fazer's production operations. Your work will protect safety, production availability and business continuity at our sites in the Nordics and Baltics.

You will join Group ICT and work closely with the Chief Information Security Officer to shape and grow Fazer's cybersecurity capabilities. This role gives you real ownership and visibility. You will own the Group OT cybersecurity programme and set its direction, priorities and roadmap in line with our information security strategy and business needs. You will build a common framework, requirements and ways of working, and help our production sites reach and sustain the agreed OT cybersecurity maturity levels.

One of your key deliverables will be the OT cybersecurity of our new factory in Lahti. Lahti will set the baseline for OT security at Fazer. You will lead the security work through commissioning and into daily operations, and then use the same framework to develop OT security at our existing production sites.

As OT Cybersecurity Architect, you will:

• Develop OT security requirements, standards and governance, and clarify responsibilities between Factory Operations and Group ICT
• Coordinate site-specific improvement plans, support local implementation, and report progress and gaps
• Coordinate OT risk assessments and give management clear recommendations on risk treatment
• Define security requirements for OT architecture, production investments and suppliers, and review significant designs and changes
• Develop monitoring, incident response and recovery requirements, and bring your own expertise to investigation and recovery during incidents
• Set requirements for OT asset and lifecycle management, patching, backups and recovery
• Support OT cybersecurity audits and build internal capability and awareness across sites

Your key counterparts are production and site management, automation and maintenance teams, OT Service Managers, and colleagues in Group ICT and Infrastructure. You will also work with OEMs, integrators and technology suppliers. In this permanent position, you will report to the Chief Information Security Officer.

The position is located in Vantaa or Lahti, Finland, where we work mainly onsite. The role also includes regular travel to Fazer production sites in the Nordics and Baltic countries.

You lead through influence. You set direction and build commitment across production, automation and ICT without formal authority. You balance cybersecurity with production availability, safety and business needs, and you can explain complex cyber risks to senior leadership in clear business terms. You are strategic, pragmatic and self-driven, and you're comfortable building capability where practices are still developing.

In addition, we expect you to have:

• At least 10 years of combined experience in cybersecurity and production OT or industrial control environments, with relevant experience in both areas
• A proven track record of establishing and leading cybersecurity programmes, governance and operating models in complex organisations
• Experience driving change across multiple sites, stakeholders and suppliers
• Strong knowledge of IEC 62443 and relevant risk management and compliance frameworks, and the ability to turn them into practical ways of working
• Deep understanding of OT security architecture and controls, with the technical credibility to challenge designs and guide specialists
• Relevant security certifications are considered an asset

Fluency in written and spoken English is required. Finnish is strongly preferred, and Swedish is considered a plus. Your professionalism is based on relevant higher education or equivalent professional experience.