OT Cybersecurity Engineer

St1 Oy; Helsinki; On-site; EUR 90,000 - 130,000; Full time

Job summary

ST1 Oy is seeking an OT Cybersecurity Engineer to own cybersecurity across the OT estate. You will implement our Cybersecurity Management System, starting with site-by-site rollout of our Terminal Cybersecurity Architecture and then scaling a consistent OT security approach across the wider multi-site footprint.

Fluent English is mandatory; Finnish, Swedish or Norwegian preferred. You will travel across the Nordics and the UK to collaborate with the CISO, site teams and vendors to ensure secure

Qualifications

• Proven OT cybersecurity implementation at large production sites.
• Experience with multi-site rollouts across Nordics.
• CISSP or equivalent certification required.
• Fluent English; Finnish/Swedish/Norwegian preferred.

Responsibilities

• Drive site-by-site rollout of OT cybersecurity architecture.
• Set and maintain OT security standards aligned to ISO/IEC 27001, IEC 62443, CIS 18 Controls and NIS2.
• Work hands-on across IT and OT to specify and validate controls.
• Guide and challenge OT vendors on cybersecurity.
• Be trusted OT security advisor to CISO, site teams, and operations.

Skills

OT cybersecurity

Governance & tech mix

Vendor management

CISSP or equivalent

English fluency

Nordic language preference

Travel willingness

Job description

Location: Helsinki, Stockholm, Gothenburg or Turku

Start date: As agreed

Position type: Full-time

About the Role

St1 is on a mission to be the leading producer and seller of CO‐2‐aware energy. All of it depends on Operational Technology, and all of it has to be secure. We are looking for an OT Cybersecurity Engineer to take ownership of cybersecurity across this OT estate. You will implement our Cybersecurity Management System across the OT estate, starting with the correct, site‑by‑site rollout of our Terminal Cybersecurity Architecture and then scaling a consistent OT cybersecurity approach across the wider multi‑site footprint.

How you’ll help drive the change

• Driving the correct, site‑by‑site rollout of our OT cybersecurity architecture.
• Setting and maintaining OT security standards aligned to ISO/IEC 27001, IEC 62443, the CIS 18 Controls, and NIS2 obligations in Finland and Sweden.
• Working hands‑on across the IT infrastructure that supports OT and across OT systems themselves, to the level needed to specify and validate controls, not to run the plant.
• Guiding and, where needed, firmly challenging OT vendors on cybersecurity.
• Being the trusted OT security advisor to our CISO, site teams, refinery, and retail operations across the Nordics.

What you bring to the team

• A proven track record implementing OT cybersecurity, at least at large production‑site level, and multi‑site experience is a real plus.
• A genuine mix of governance and technical skill.
• Strong knowledge of OT‑specific constraints and how they differ from IT security.
• The confidence to challenge vendors and the credibility to make it stick.
• CISSP or equivalent certification.
• Fluent English (mandatory); Finnish, Swedish, or Norwegian is preferred.
• A proactive, can‑do mindset and the appetite to work in a lean, fast‑moving organisation where you build the structure rather than inherit it.
• Willingness to travel across the Nordics and the UK.

Who are we looking for

We are looking for your passion, skills and drive. We look for those who recognise the St1 Spirit in themselves: curious, commercial, committed and caring. This spirit shows up in daily actions: creating a space where it is safe to be yourself and raise problems early, following through when delivery gets tough, thinking end‑to‑end rather than in silos, and learning faster than the environment changes. Let us know what you can and want to do.

Why Join St1?

• A high‑impact, high‑autonomy role at the centre of critical energy infrastructure, in a company moving fast on the energy transition.
• A clear mandate and real ownership: you shape how OT security is done across St1, rather than inheriting someone else’s structure.
• The backing of an established CISO function and 24/7 SOC/NOC partners, so you are supported, not alone.
• Work that matters, where a security decision protects real people, safety, and the environment.
• A talented Nordic Business Technology organisation with a genuine culture of freedom and responsibility.

How we support your journey

At St1, your safety and wellbeing come first. We offer an open and inclusive workplace where you’re respected and trusted to take initiative. In a hands‑on, informal culture— and a business that never stands still— there’s room to explore ideas and take on new challenges. We support your journey through learning and opportunities to grow across teams and countries.

We welcome applicants from all backgrounds and are committed to an inclusive and equitable recruitment process.