Senior OT Security Specialist

Vattenfall; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

Vattenfall's Operational Technology division seeks a Senior OT Security Specialist to strengthen the ISMS, implement security controls, and ensure compliance with ISO 27001/27019, NIS2, and CER across the organization. You will translate complex requirements into practical procedures, mentor engineers, and support audits, risk assessments, and cross-functional initiatives in a fast‑moving energy business.

Join a diverse, international team and help enable secure, reliable renewable energy

Qualifications

• Experience translating security requirements into practical best-practices for technical teams.
• Familiarity with ISO 27001, ISO 27019, NIS2, CER directives and ISMS frameworks.
• Ability to plan risk assessments and translate outcomes into actionable steps.

Responsibilities

• Drive the implementation and ongoing maturity of the ISMS and related compliance frameworks across the organization.
• Translate ISMS requirements into clear procedures and work instructions for leadership and engineers.
• Plan and facilitate risk assessments and connect findings to projects.
• Support audits, deviations handling, and mitigation actions to close non-compliances.
• Collaborate with cross-functional teams to craft fit-for-purpose security solutions.

Skills

ISMS

ISO 27001

NIS2

CER

Security controls

Job description

Within our Operational Technology (OT) division in Project Delivery & Engineering, we deliver and integrate digital solutions that support renewable energy production and ensure reliable operations. As the primary provider of digital solutions for Business Unit Offshore Wind, and of Business Unit Onshore and Solar and Batteries, we manage the entire value chain, from bid acquisition to asset construction and operation, focusing on Operational Technology (OT) and IT. Cybersecurity and compliance are critical pillars in this mission.

About The Role

We are looking for a Senior OT Security Specialist - with proven track record in helping teams to implement security controls - to join our Security & Compliance team. Being part of first line of defence, we are strengthening and maintaining the implementation of preventive and reactive security measures related to ISO 27001, ISO 27019, and directives such as NIS2 and CER, all steered through our internal ISMS. In this role, you will play a key part in ensuring continuous improvement and adaptation to evolving regulations, translating complex requirements into practical solutions that create business value. The Security & Compliance team is a business enabler and your service- and collaborative mindset will ensure your success in this role.

Your Responsibilities

• Drive the implementation and ongoing maturity of the Information Security Management System (ISMS) and related compliance frameworks, including NIS2, across the organization.
• Translate ISMS requirements and best practices into clear, actionable procedures and work instructions for leadership and technical specialists such as network and server engineers.
• Plan and facilitate risk assessments, advise on synergies between identified risks, and connect findings to planned projects.
• Interface with colleagues in 1st line, internal stakeholders, and 2nd line of defence - supporting internal activities leading up to audits, during audits, and afterwards, by consulting on mitigative actions to close non-compliances findings.
• Support the organization in fulfilling compliance responsibilities to maintain a high level of compliance risk coverage.

Your work will span strategic planning, hands-on implementation, and facilitating procedures and documentation work, ensuring robust security and compliance practices.

Key Tasks

• Lead the internal adaptation and continues maturity of compliance with Vattenfall ISMS, protecting our spinning assets and ensuring compliance with ISO 27001, ISO 27019, NIS2, and CER directives.
• Coordination & Follow-up: Drive the compliance aspect of project ensuring progress, monitor deliverables, and contribute with data, presentations, and reporting.
• Documentation & Quality Assurance: Review and develop processes, guidelines, and standards to ensure accuracy, relevance, and accessibility.
• Audit support & Compliance: Participate in internal and external audits, manage deviations, and ensure systems and procedures meet directive requirements.
• Cross-functional Collaboration: guide and enable technical specialists in crafting fit-for-purpose security solutions and foster a strong, cooperative work environment.

Qualifications

You have experience in translating security requirements into useful and descriptive best-practices for technical experts, enabling easy adaptation. Preferably from an utility, industrial, or production environment. You are structured, analytical, and thrive in roles where you create clarity and make things happen - even in areas lacking structure. You communicate clearly at all organizational levels and enjoy being a key player in identifying, solving, and implementing solutions. You foster collaboration and enjoy enabling others making them knowledgably and capable in engineering and maturing engineering solutions.

Additionally, You Bring

• Experience with compliance, digital security, or quality systems across requirement scoping, reviewing, and assessing solutions.
• Ability to balance regulatory requirements with business feasible solutions.
• Experience with ISO 27001 and preferably NIS2, ISO 27019, or IEC 62443.
• Strong skills in conveying complex topics in a clear, practical manner.
• Experience in planning and coordinating activities in large organizations.
• Excellent written communication skills and command of the English language.
• Personal qualities: proactive, independent, structured, and collaborative.
• We welcome candidates from a wide range of educational backgrounds; and experience from the energy sector or an engineering degree is considered an advantage.

Our offer

Good remuneration, a challenging and international work environment, and the possibility to work with some of the best in the field. You will be working in interdisciplinary teams and you can always count on support from committed colleagues. We offer attractive employment conditions and opportunities for personal and professional development.

Commitment to Diversity

Vattenfall is committed to promoting a diverse and inclusive community - a place where we can all be ourselves and succeed on merit. We offer a range of family friendly, inclusive employment policies, flexible working arrangements, staff engagement forums and services to support all our employees.

We are convinced that diversity contributes to build a more profitable and attractive company and we strive to be good role model regarding diversity. Vattenfall works actively for all employees to have the same opportunities and rights regardless of gender, ethnicity, age, transgender identity or expression, religion or other belief, disability or sexual orientation.

Company Description

Vattenfall is a European energy company with approximately 21000 employees. For more than 100 years we have electrified industries, supplied energy to people’s homes and modernized our way of living through innovation and cooperation. We now want to make fossil-free living possible within one generation. To be able to reach this ambitious goal we are looking for talented individuals who, in addition to their passion for their own role, also have strong team spirit and want to contribute to supporting a meaningful corporate mission.