CISO - Critical Energy Infra Security (NIS2/ISO27001)

Polymer; Amsterdam; Remote; EUR 120,000 - 180,000; Full time

Job summary

Return is hiring a CISO to own the entire security program for IT, OT, and cloud across multiple European sites. You will report to the CTO and work directly with the management board to set risk appetite and drive security standards, audits, and policy enforcement.

In this role you will lead regulatory compliance, oversee ISO 27001 scope, and drive IEC 62443 certification from gap analysis to final certification.

Qualifications

• Hands-on security leadership in regulated industries or critical infrastructure.
• Experience writing and enforcing security policies and standards.
• Ability to drive security programs across IT, OT, and cloud platforms.

Responsibilities

• Own security standards for IT and OT across the platform and sites.
• Lead regulatory compliance efforts including NIS2, KRITIS, and related policies.
• Manage ISO 27001 scope, audits, and supplier assessments.
• Oversee IEC 62443 certification work from gap assessment to certification.
• Negotiate security requirements in vendor and contract documents.
• Collaborate with CTO, Head of OT, and platform teams to enforce security controls.

Skills

Security leadership

Regulatory compliance

Threat modeling

OT/IT security

Cloud security

Tools

Terraform

Kubernetes

Network policies

Modbus/OPC-UA

Job description

Return is hiring a CISO to own the entire security program for IT, OT, and cloud across multiple European sites. You will report to the CTO and work directly with the management board to set risk appetite and drive security standards, audits, and policy enforcement.

In this role you will lead regulatory compliance, oversee ISO 27001 scope, and drive IEC 62443 certification from gap analysis to final certification.