OT Cybersecurity Engineer

Barona IT Talent Oy; Helsinki; On-site; EUR 70,000 - 110,000; Full time

Job summary

St1 is seeking an OT Cybersecurity Engineer to own cybersecurity across its OT estate. You will implement the Cybersecurity Management System and rollout Terminal Cybersecurity Architecture across sites, then scale a consistent OT security approach across the Nordics and UK.

You will work with governance and hands-on security across OT and IT, collaborating with CISO and site teams to ensure availability, safety, and environmental compliance.

Qualifications

• Proven track record implementing OT cybersecurity at large production-site level.
• Governance and technical skill mix.
• Strong knowledge of OT constraints vs IT security.
• Ability to challenge OT vendors and ensure follow-through.
• CISSP or equivalent certification.
• Fluent English (mandatory); Finnish/Swedish/Norwegian preferred.
• Proactive mindset in a lean, fast-moving org.
• Willingness to travel across Nordics and UK.

Responsibilities

• Drive site-by-site rollout of OT cybersecurity architecture.
• Set and maintain OT security standards aligned to ISO/IEC 27001, IEC 62443, CIS 18 Controls and NIS2.
• Work hands-on across IT and OT systems to specify and validate controls.
• Guide and challenge OT vendors on cybersecurity as needed.
• Be the trusted OT security advisor to CISO, site teams, refinery and retail ops in Nordics.

Skills

OT cybersecurity

Governance

Vendor engagement

ISO 27001

IEC 62443

NIS2

Fluent English

Nordic language knowledge

Travel willingness

Tools

CISSP

Job description

St1 is an energy transition company with the vision to be the leading producer and seller of CO-aware energy. St1 operates in Finland, Sweden, Norway, and the United Kingdom. Our portfolio encompasses oil products, biogas, Sustainable Aviation Fuel (SAF), renewable diesel (HVO) and solar power. St1 has 1,150 retail stations across Finland, Sweden and Norway. Together, were more than 1,000 curious, committed and caring people here to change the game. Ready to challenge the ordinary with us?

About the Role

St1 is on a mission to be the leading producer and seller of CO2-aware energy. Behind that mission sits real, physical infrastructure: the Gothenburg refinery, fuel terminals, marine bases and depots, a growing retail estate that runs everything from car-wash systems to energy distribution, and UK biofuel operations feeding our Gothenburg biorefinery. All of it depends on Operational Technology, and all of it has to be secure.

We are looking for an OT Cybersecurity Engineer to take ownership of cybersecurity across this OT estate. This is a role for someone who is equally at home writing a security standard and sitting at a terminal working through network segmentation, firewall rules, and monitoring coverage. You understand that OT is not IT: long lifecycles, availability comes first, patching windows are scarce, and a security decision can have safety and environmental consequences.

Your first mission is clear. You will implement our Cybersecurity Management System (CSMS) across the OT estate, starting with the correct, site-by-site rollout of our Terminal Cybersecurity Architecture. From there, you scale a consistent OT cybersecurity approach across the wider multi-site footprint.

How you’ll help drive the change

Joining St1, you’ll be part of running and developing a profitable business that invests in long‑term energy solutions. Together we achieve the extraordinary through everyday work. As an OT Cybersecurity Engineer, you’ll play a key role in

• Driving the correct, site‑by‑site rollout of our OT cybersecurity architecture.
• Setting and maintaining OT security standards aligned to ISO/IEC 27001, IEC 62443, the CIS 18 Controls, and NIS2 obligations in Finland and Sweden.
• Working hands‑on across the IT infrastructure that supports OT and across OT systems themselves, to the level needed to specify and validate controls, not to run the plant.
• Guiding and, where needed, firmly challenging OT vendors on cybersecurity.
• Being the trusted OT security advisor to our CISO, site teams, refinery, and retail operations across the Nordics.

What you bring to the team

We're looking for a colleague with the drive to challenge, collaborate and grow. To thrive in this role, you likely have:

• A proven track record implementing OT cybersecurity, at least at large production‑site level, and multi‑site experience is a real plus.
• A genuine mix of governance and technical skill.
• Strong knowledge of OT‑specific constraints and how they differ from IT security.
• The confidence to challenge vendors and the credibility to make it stick.
• CISSP or equivalent certification.
• Fluent English (mandatory); Finnish, Swedish, or Norwegian is preferred.
• A proactive, can‑do mindset and the appetite to work in a lean, fast‑moving organisation where you build the structure rather than inherit it.
• Willingness to travel across the Nordics and the UK.

Who are we looking for

We are looking for your passion, skills and drive. We’re looking for those who recognize the St1 Spirit in themselves: Curious, Commercial, Committed and Caring. This Spirit shows up in daily actions: creating a space where it is safe to be yourself and raise problems early, following through when delivery gets tough, thinking end‑to‑end rather than in silos, and learning faster than the environment changes. Let us know what you can and want to do.

Why Join St1?

• A high‑impact role at the centre of critical energy infrastructure and the energy transition.
• Full ownership to shape and mature OT security across St1.
• Backed by a strong CISO function and 24/7 SOC/NOC partners.
• Security work that protects people, safety, and the environment.
• A talented Nordic technology organisation built on trust, freedom, and responsibility

How we support your journey

At St1, your safety and wellbeing come first. We offer an open and inclusive workplace where you’re respected and trusted to take initiative. In a hands‑on, informal culture – and a business that never stands still – there’s room to explore ideas and take on new challenges. We support your journey through learning and opportunities to grow across teams and countries.

You’ll have real ownership of cybersecurity across our operational technology estate, working with a wide range of teams; backed by competitive pay, a bonus scheme and genuine opportunities to grow your career.

If you’d like to explore more about our culture, visit our career site.

We welcome applicants from all backgrounds and are committed to an inclusive and equitable recruitment process.

Interested? Send us your CV and cover letter via the Barona Career site no later than Thursday, 14 August 2026. For more information, please reach out to us during the August calling times: Tuesday, 4 of August or Thursday, 6 August 2026 between noon and 2 pm.

Contact person is Baronas Recruitment Team Lead Lassi Jyrinsalo at [phone] or via email at [e-mail].

Lets challenge the ordinary

Employment relationship: Employment. Wage: Other. Number of positions: 1.

Source: Job Market Finland/Työmarkkinatori

Osaamisalue: IT & tietoliikenne