Director Information & Cyber Security

Bulk Infrastructure Group; Oslo; Hybrid; NOK 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Health insurance

Parental leave

Wellness allowance

Internet cost contribution

Annual health check

Flexible time off

Job summary

Bulk is seeking a Director Information & Cyber Security to own security across IT, OT, and software platforms. You will lead the security function, partner with business units, and balance risk with opportunities.

You will report to the VP Digital & IT and work with security partners to maintain audit-ready controls across multiple countries. Ideal candidates have 10+ years in information and cyber security, proven leadership, and a track record of working with demanding international customers.

Qualifications

• 10+ years in information and cyber security, with a sitting CISO role in industrial orgs or deputy ready to step up.
• Proven experience leading security teams and managing external partners.
• Track record of working strategically with business units and presenting to leadership/board.
• Direct experience with demanding international customers and operational challenges.
• Working knowledge of IT, OT and software development security; strong audit/compliance background.

Responsibilities

• Partner with each business unit to balance cyber risk and opportunity.
• Coordinate enterprise-wide security initiatives across sites and countries.
• Lead and grow the security team and manage external partners.
• Align with physical and personnel security leads.
• Own the information security management system and compliance with regulations.
• Represent Bulk on security to international customers during reviews and audits.

Skills

Cyber security leadership

Business partnership

Governance & compliance

Incident response

Threat monitoring

Stakeholder communication

IT/OT security

ISO/IEC 27001

SOC 2

Board reporting

Education

Engineering degree

Information security degree

Tools

CISSP

CISM

GICSP

ISO 27001

Job description

At Bulk, our mission is to build sustainable infrastructure that supports the digital society of tomorrow. As one of the leading providers of sustainable, high-performance data center solutions in the Nordics, we design and operate infrastructure that powers artificial intelligence and the digital society - efficiently, securely, and with 100% renewable energy. We are now looking to hire our Director Information & Cyber Security, to play a central role in protecting the critical infrastructure our customers and the digital society depend on.

Bulk builds and runs critical infrastructure, and our customers audit us closely. You will own information and cyber security for the whole company, across IT, the OT that runs our sites, and the software we build. This is a business-facing CISO role: you weigh cyber risk against business opportunity with every part of the business.

You will report to the VP Digital & IT, lead the security team and our security partners, and work alongside the leads for physical and personnel security. Bulk is growing fast, and security must keep pace.

What you'll do:

As our Director Information & Cyber Security, your key responsibilities will be:

Business partnership and leadership

• Work strategically with each business unit, weighing cyber risk against opportunity and finding pragmatic ways to enable the business.

• Coordinate enterprise-wide security initiatives across units, sites and countries, with controls that teams work with rather than around.

• Lead and grow the security team, and manage our security partners.

• Align with the leads for physical and personnel security.

Governance and compliance

• Own the information security management system, its policies and controls, and the cyber risk register.

• Own compliance with NIS2 and national security legislation in every country we operate in, and keep us audit-ready.

• Present cyber posture, risk and investment priorities to top leadership and the board.

Scope: IT, OT and what Bulk builds

• IT: identity and access, endpoints, cloud and core business systems.

• OT: site control systems, segmentation, the OT/IT boundary, and access to industrial equipment.

• What Bulk builds: security built into our digital platform and solutions, and clear rules for how people and AI agents use company data.

Detection and response

• Run monitoring and detection with specialist partners.

• Own incident response, test it regularly, and lead real incidents through to closure and notification.

• Keep our defenses current against criminal and state-sponsored adversaries as the regional threat picture and frontier AI change.

• Work with national cyber security authorities and forums.

Customers and supply chain

• Represent Bulk on security to international customers: strategically in sales and design reviews, operationally in audits, escalations and incidents.

• Close the gaps between our framework and what hyperscalers, neoclouds and enterprise customers require.

• Own cyber risk from suppliers and on-site contractors.

Who are you?

You are business-oriented and pragmatic: you weigh cyber risk against opportunity, protect what matters, and say no only when it is warranted. You are an experienced people leader who can coordinate across a whole organization. You speak directly and credibly with demanding customers, in strategy discussions and under operational pressure, and you are as comfortable on the site floor as in the boardroom.

What you bring:

• 10+ years in information and cyber security, as a sitting CISO in an industrial organization (energy, process industry, manufacturing, telecoms or data centers) or as the deputy ready to step up.

• Proven experience leading and developing security teams, and managing external partners.

• A track record of working strategically with business units, leading enterprise-wide initiatives, and presenting to top leadership and a board.

• Direct experience with demanding international customers, both strategically and in difficult operational situations.

• Working knowledge of security across IT, OT and software development.

• Solid knowledge of critical-infrastructure regulation, ISO/IEC 27001 and 27002, IEC 62443 and SOC 2 Type II, and experience taking a management system through external audit.

• Experience leading a real security incident from detection to closure.

• A serious, practical interest in frontier AI as a security question.

• A degree in engineering, computer science or information security, and excellent English.

• An advantage: deep OT experience (building management systems, SCADA, remote and vendor access), security in software development, a Scandinavian language, and CISSP, CISM or GICSP.

Why join us?

• Own information and cyber security for the whole company, across IT, OT and the software Bulk builds itself.

• Build the function and the team behind it as Bulk scales, close enough to the systems and the decisions to shape them.

• Influence how key operational processes are shaped and developed.

• Become part of a growing organization with a strong sustainability mission.

• Work with critical infrastructure that supports the digital society of tomorrow.

• Collaborate with highly skilled colleagues across disciplines and locations.

What we offer our Bulkies:

• A dynamic, growth-oriented workplace with a strong sustainability focus

• Comprehensive insurance (health, travel – business & private) and annual health check

• Additional time off during Easter and Christmas

• Monthly contribution to home internet costs and sustainable commuting

• Annual wellness allowance to support an active lifestyle

• Fully paid parental leave

Take the next step in your career and join us as we build the future of digital infrastructure in Norway and beyond!

Bulk aim for gender balance and a diverse workforce. We do not discriminate against gender, race, ethnicity, religion, sex, sexual orientation, age, pregnancy and/or disability. We appreciate the time you have spent reading this, and if the role aligns with your aspirations, we encourage you to apply!