Director Information and Cyber Security

Bulk; Oslo; On-site; NOK 2,000,000 - 2,800,000; Full time

Benefits offered by this job

Health and travel insurance

Annual health check

Extra time off: Easter & Christmas

Internet cost contribution

Sustainable commuting

Annual wellness allowance

Fully paid parental leave

Job summary

Bulk seeks a Director Information & Cyber Security to own and lead cyber security for the entire company across IT, OT and software.

You will build and manage the security team, partner with external vendors, and drive enterprise-wide security initiatives to align with business goals and customer expectations.

Qualifications

• 10+ years in information and cyber security, in industrial setting.
• Proven experience leading security teams and external partners.
• Degree in engineering, computer science or information security, with excellent English.

Responsibilities

• Own information and cyber security for the entire company across IT, OT and software.
• Lead the security team and security partners and report to VP Digital & IT.
• Represent Bulk on security to international customers and audits.
• Maintain ISMS and ensure compliance with NIS2 and other regulations.

Skills

CISO experience

Security leadership

Stakeholder engagement

IT/OT security

Partnership management

Education

Engineering / CS / InfoSec degree

Tools

ISO/IEC 27001/27002

IEC 62443

SOC 2 Type II

NIS2

Job description

• Sektor Privat

Lead and own information and cyber security across IT, OT, and software, managing the security team and ensuring compliance with NIS2.

• 10+ years in cyber security, as a CISO or deputy in an industrial organization
• Knowledge of IT, OT, and software development security
• Knowledge of ISO/IEC 27001/2, IEC 62443, SOC 2 Type II, and NIS2
• Degree in engineering, computer science, or information security, with excellent English
• Experience leading security teams and managing external partners
• Comprehensive health and travel insurance, plus annual health check
• Additional time off during Easter and Christmas
• Monthly contribution to home internet and sustainable commuting
• Annual wellness allowance and fully paid parental leave

Ready to own cyber security for a whole company, and build the team behind it?

At Bulk, our mission is to build sustainable infrastructure that supports the digital society of tomorrow. As one of the leading providers of sustainable, high-performance data center solutions in the Nordics, we design and operate infrastructure that powers artificial intelligence and the digital society - efficiently, securely, and with 100% renewable energy. We are now looking to hire our Director Information & Cyber Security, to play a central role in protecting the critical infrastructure our customers and the digital society depend on.

Bulk builds and runs critical infrastructure, and our customers audit us closely. You will own information and cyber security for the whole company, across IT, the OT that runs our sites, and the software we build. This is a business-facing CISO role: you weigh cyber risk against business opportunity with every part of the business.

You will report to the VP Digital & IT, lead the security team and our security partners, and work alongside the leads for physical and personnel security. Bulk is growing fast, and security must keep pace.

What you'll do:

As our Director Information & Cyber Security, your key responsibilities will be:

Business partnership and leadership

• Work strategically with each business unit, weighing cyber risk against opportunity and finding pragmatic ways to enable the business.

• Coordinate enterprise-wide security initiatives across units, sites and countries, with controls that teams work with rather than around.

• Lead and grow the security team, and manage our security partners.

• Align with the leads for physical and personnel security.

Governance and compliance

• Own the information security management system, its policies and controls, and the cyber risk register.

• Own compliance with NIS2 and national security legislation in every country we operate in, and keep us audit-ready.

• Present cyber posture, risk and investment priorities to top leadership and the board.

Scope: IT, OT and what Bulk builds

• IT: identity and access, endpoints, cloud and core business systems.

• OT: site control systems, segmentation, the OT/IT boundary, and access to industrial equipment.

• What Bulk builds: security built into our digital platform and solutions, and clear rules for how people and AI agents use company data.

Detection and response

• Run monitoring and detection with specialist partners.

• Own incident response, test it regularly, and lead real incidents through to closure and notification.

• Keep our defenses current against criminal and state-sponsored adversaries as the regional threat picture and frontier AI change.

• Work with national cyber security authorities and forums.

Customers and supply chain

• Represent Bulk on security to international customers: strategically in sales and design reviews, operationally in audits, escalations and incidents.

• Close the gaps between our framework and what hyperscalers, neoclouds and enterprise customers require.

• Own cyber risk from suppliers and on-site contractors.

Who are you?

You are business-oriented and pragmatic: you weigh cyber risk against opportunity, protect what matters, and say no only when it is warranted. You are an experienced people leader who can coordinate across a whole organization. You speak directly and credibly with demanding customers, in strategy discussions and under operational pressure, and you are as comfortable on the site floor as in the boardroom.

What you bring:

• 10+ years in information and cyber security, as a sitting CISO in an industrial organization (energy, process industry, manufacturing, telecoms or data centers) or as the deputy ready to step up.

• Proven experience leading and developing security teams, and managing external partners.

• A track record of working strategically with business units, leading enterprise-wide initiatives, and presenting to top leadership and a board.

• Direct experience with demanding international customers, both strategically and in difficult operational situations.

• Working knowledge of security across IT, OT and software development.

• Solid knowledge of critical-infrastructure regulation, ISO/IEC 27001 and 27002, IEC 62443 and SOC 2 Type II, and experience taking a management system through external audit.

• Experience leading a real security incident from detection to closure.

• A serious, practical interest in frontier AI as a security question.

• A degree in engineering, computer science or information security, and excellent English.

• An advantage: deep OT experience (building management systems, SCADA, remote and vendor access), security in software development, a Scandinavian language, and CISSP, CISM or GICSP.

Why join us?

• Own information and cyber security for the whole company, across IT, OT and the software Bulk builds itself.

• Build the function and the team behind it as Bulk scales, close enough to the systems and the decisions to shape them.

• Influence how key operational processes are shaped and developed.

• Become part of a growing organization with a strong sustainability mission.

• Work with critical infrastructure that supports the digital society of tomorrow.

• Collaborate with highly skilled colleagues across disciplines and locations.

What we offer our Bulkies:

• A dynamic, growth-oriented workplace with a strong sustainability focus

• Comprehensive insurance (health, travel – business & private) and annual health check

• Additional time off during Easter and Christmas

• Monthly contribution to home internet costs and sustainable commuting

• Annual wellness allowance to support an active lifestyle

• Fully paid parental leave

Take the next step in your career and join us as we build the future of digital infrastructure in Norway and beyond!

We conduct background checks on all hires. We may also require you to obtain security clearance and a police certificate of conduct.

Bulk aim for gender balance and a diverse workforce. We do not discriminate against gender, race, ethnicity, religion, sex, sexual orientation, age, pregnancy and/or disability. We appreciate the time you have spent reading this, and if the role aligns with your aspirations, we encourage you to apply!

• Access control (IT)
• ICT Security
• Information Security Management System (ISMS)
• ISO 27001
• SOC 2

Racing to bring sustainable infrastructure to a global audience!

We are a leading Nordic developer of digital infrastructure. Bulk develops data centers and fiber networks that serves as the backbone of our digital society.

Bulk Infrastructure is a leading Nordic provider of sustainable digital infrastructure, specializing in data centers, fiber networks, and industrial real estate. Founded with a long-term vision, our founder remains a key owner, ensuring continuity and commitment to our mission. We are also backed by BGO, a global real estate investment management firm known for its expertise and leadership in the industry. Supported by a strong management team, solid ownership and delivered by a dedicated Team Bulk – we build something bigger than ourselves.