Security, Cyber & Resilience Manager

2757 Equinor Polska Sp. z o.o.; Warszawa; On-site; PLN 240,000 - 360,000; Full time

Job summary

Equinor Polska Sp. z o.o. seeks a Security, Cyber & Resilience Manager to lead security, cyber and resilience activities for its offshore wind business in Poland. The role covers protecting assets, people and information, and ensuring regulatory readiness across projects and operations.

The position requires extensive experience in security, cyber, and regulatory domains, plus fluency in Polish and English to coordinate with authorities, partners, and management.

Qualifications

• University degree in security, cybersecurity, risk management or related field.
• 10+ years of relevant security/cybersecurity/resilience experience.
• Experience in energy/critical infrastructure sectors.
• Knowledge of Polish/NIS2/ CER frameworks and EU security requirements.
• Experience with regulators, authorities, audits or compliance programs.
• Fluency in Polish and English is required.

Responsibilities

• Lead security, cybersecurity and resilience activities for Equinor’s offshore wind business in Poland.
• Coordinate protection of offshore/onshore assets, people, information and services.
• Manage physical and technical security programmes, access control and surveillance.
• Coordinate cyber risk assessments for IT/OT/ICS and connected systems.
• Ensure security requirements are integrated into projects, contracts and procedures.
• Support incident response, crisis management and business continuity.
• Monitor Polish and EU regulatory expectations and deliver governance evidence.
• Engage with authorities and stakeholders at the Poland level.

Skills

Strong judgement

Stakeholder management

Communication

Influencing skills

Fluency in Polish and English

Education

University degree in security, cybersecurity, risk management, engineering, law, public administration or related discipline

Job description

What does the job involve?

The Security, Cyber & Resilience Manager will lead and coordinate security, cybersecurity and resilience activities for Equinor’s offshore wind business in Poland. The role will protect offshore and onshore energy assets, people, information, technology, operations and critical services, with particular focus on national critical infrastructure and the transition from projects into operations. The role is the Poland focal point for integrated security risk management, cyber-physical security, critical infrastructure protection and regulatory readiness. It translates applicable Polish, EU and corporate requirements into practical, risk‑based governance, controls, assurance and improvement activities across projects and operations. Working closely with operations, projects, enterprise cybersecurity, IT, OT, legal, emergency preparedness, public affairs, procurement, partners and management, the role will strengthen secure, resilient and compliant offshore wind operations and support effective decision-making in an evolving threat and regulatory environment.

What will my tasks be?

• Security and critical infrastructure Lead the identification, assessment and treatment of security risks affecting offshore wind farms, onshore facilities, personnel, contractors, suppliers, critical services and business continuity.
• Own and coordinate critical infrastructure protection and resilience planning, including required security documentation, protective measures, exercises, assurance, reporting and improvement follow‑up.
• Manage physical and technical security programmes, including access control, guarding, surveillance, intrusion detection, security procedures, awareness and training.
• Coordinate the secure handling of classified and sensitive security information, including need‑to‑know arrangements and applicable screening, vetting and access requirements.
• Cyber and cyber‑physical resilience Act as the Poland business focal point for cybersecurity and cyber‑physical resilience, working with enterprise cybersecurity, IT and OT specialists to ensure clear ownership and effective implementation.
• Coordinate cyber risk assessments and security requirements for IT, OT/ICS, communications, digital services and connected operational systems across the asset lifecycle.
• Ensure that cybersecurity, incident response, recovery, supply‑chain security and assurance requirements are integrated into projects, contracts, operational procedures and management reporting.
• Support coordinated response to cyber and hybrid incidents, including escalation, crisis interfaces, lessons learned and corrective actions.
• Regulatory compliance and assurance Coordinate security and resilience compliance in Poland, including applicable requirements concerning national critical infrastructure, the Polish National Cybersecurity System, NIS2, CER and related implementing legislation and guidance.
• Monitor emerging Polish and EU requirements and authority expectations, assess business impact, and translate them into actionable governance, controls, plans and evidence.
• Maintain an integrated obligations register covering relevant legal, regulatory, licence, permit and corporate requirements, with clear ownership, implementation status and evidence of compliance.
• Drive assurance programmes, compliance assessments, audit readiness, management reviews and closure of identified gaps across projects and operational assets.
• Preparedness, continuity and incident management Strengthen emergency preparedness, security incident management, crisis interfaces and business continuity through plans, exercises, testing, lessons learned and corrective actions.
• Promote an all‑hazards resilience approach covering physical, cyber, personnel, supply‑chain, maritime, geopolitical and operational disruption scenarios.
• Ensure that security and resilience dependencies, recovery priorities and continuity requirements are understood by relevant asset and support teams.
• Stakeholder engagement and leadership support Serve as the primary Poland security interface towards relevant authorities and external stakeholders, coordinated with management and corporate security functions.
• Monitor threat information and geopolitical developments, assess potential implications for offshore wind activities and provide concise recommendations to management and operational stakeholders.
• Provide senior management and boards with integrated security, cyber and resilience reporting, risk assessments, regulatory updates, assurance status and recommended risk‑treatment decisions.
• Build a strong security and resilience culture across employees, contractors, partners and suppliers.

Here's what we expect from you

At Equinor, there are some overall qualities we regard as essential. We want you to identify with the values that guide our decisions and help us succeed and grow: open, collaborative, courageous and caring. We expect you to make safety your priority and to contribute to our zero‑harm culture.

And for this specific position, we are also looking for

• Required University degree in security, cybersecurity, risk management, engineering, law, public administration or a related discipline.
• 10+ years of relevant experience across security, cybersecurity, resilience, critical infrastructure, risk management or regulatory compliance.
• Experience from energy, utilities, offshore, maritime, defence, transportation or another critical‑infrastructure sector.
• Strong understanding of Polish critical‑infrastructure protection and relevant EU security, resilience and cybersecurity frameworks.
• Working knowledge of NIS2, the Polish National Cybersecurity System, CER and related governance, assurance and compliance expectations.
• Practical understanding of cyber risk and the interfaces between enterprise IT, OT/ICS and physical security.
• The role need not be the technical system owner, but must be able to challenge, coordinate and assure specialist delivery.
• Experience engaging with regulators, public authorities, emergency services or security agencies, and managing audits, assurance or compliance programs.
• Strong judgement, stakeholder management, communication and influencing skills.
• Fluency in Polish and English language is required.
• Preferred Experience in offshore wind, offshore operations, oil and gas or large‑scale energy infrastructure.
• Knowledge of OT/ICS security, cyber‑physical risk and security‑by‑design across major projects and operational assets.
• Experience with crisis management, emergency preparedness, incident response and business continuity.
• Experience working with classified or sensitive security information; existing clearance is an advantage where relevant.

What can we offer you

• Not just a job - a career In Equinor, your development begins on day one. You will build your competence through a wide range of learning activities while being empowered to build your career across multiple disciplines and geographies. Our internal job market allows a wide range of opportunities for development and growth within your own field, or even in other areas you find interesting and relevant.
• Attractive rewards We give you a comprehensive benefits package with a competitive salary, global parental leave, bonus scheme and pension plan.
• Wellness and work‑life balance We care about and prioritise our employees’ well‑being. We know that for you to be the best version of yourself in the workplace, being able to collect your children, attend a class or simply enjoy social time can be invaluable. That’s why we encourage you to make use of our flexible work arrangements wherever possible.

An inclusive culture We believe embracing our differences makes us stronger. For us, true inclusion means being able to bring your whole self to work, and for you and everyone else to feel accepted and valued.

Equal opportunities for everyone Equinor is an equal‑opportunity employer. We make all employment decisions, which include hiring, promotion, transfer, demotion, termination, and training, without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, parental status, veteran status, or any other protected status. As part of this commitment, reasonable adjustments will be made during the recruitment process for candidates with disabilities or long‑term health conditions. If you have any specific requirements, please clarify this in your application and our team will be in contact to see how we can support your needs. We also believe everyone should be paid fairly and consistently for their contribution to our collective success. To ensure fairness and transparency, positions at Equinor are evaluated using our global job architecture based on the position’s responsibilities, complexity, and impact, and regularly reviewed to ensure consistency and alignment across the organisation.

About Equinor

Equinor is an international energy company headquartered in Norway, energising the lives of 170 million people worldwide. Our ambition is to be a leading company in the energy transition and achieve net zero by 2050. Our task is enormous: supplying the world with the energy it needs, while lowering emissions to the atmosphere. To achieve it, we are looking for like‑minded people to join our team of 25,000 colleagues working in more than 20 countries. We’re up for the challenge. Are you? Equinor is an international energy company headquartered in Norway, energising the lives of 170 million people worldwide. Our ambition is to be a leading company in the energy transition and achieve net zero by 2050. Our task is enormous: supplying the world with the energy it needs, while lowering emissions to the atmosphere. To achieve it, we are looking for like‑minded people to join our team of 25,000 colleagues working in more than 20 countries. We’re up for the challenge. Are you?