Security, Cyber & Resilience Manager

Equinor; Województwo mazowieckie; Sur place; PLN 360 000 - 600 000; Plein temps

Résumé du poste

Equinor is seeking a Security, Cyber & Resilience Manager to lead security, cybersecurity, and resilience for its offshore wind operations in Poland. You will protect assets, people, and information, coordinating with enterprise cybersecurity and OT/IT teams across the asset lifecycle.

The role requires deep experience in security, resilience and regulatory compliance, with fluency in Polish and English. You will engage with authorities, oversee risk management, and drive incident response and

Qualifications

• University degree in security, cybersecurity, risk management, engineering, law, public administration or related discipline.
• 10+ years of relevant experience across security, cybersecurity, resilience, critical infrastructure, risk management or regulatory compliance.
• Experience from energy, utilities, offshore, maritime, defence, transportation or another critical-infrastructure sector.
• Strong understanding of Polish critical-infrastructure protection and relevant EU security, resilience and cybersecurity frameworks.
• Working knowledge of NIS2, the Polish National Cybersecurity System, CER and related governance, assurance and compliance expectations.
• Practical understanding of cyber risk and the interfaces between enterprise IT, OT/ICS and physical security.
• Experience engaging with regulators, public authorities, emergency services or security agencies, and managing audits, assurance or compliance programs.
• Fluency in Polish and English language is required.

Responsabilités

• Lead identification, assessment and treatment of security risks affecting offshore wind assets and facilities.
• Own and coordinate protection and resilience planning, including exercises and reporting.
• Manage physical and technical security programmes: access control, surveillance, and training.
• Coordinate secure handling of classified and sensitive information and access requirements.
• Act as Poland focal point for cybersecurity and cyber-physical resilience.
• Coordinate cyber risk assessments for IT, OT/ICS, and connected systems.
• Ensure cyber and resilience requirements are integrated into projects and contracts.
• Support coordinated response to cyber and hybrid incidents, including lessons learned.

Connaissances

Polish & English fluency

Stakeholder management

Communication

Influencing skills

Formation

10+ years of relevant security/ resilience experience

Description du poste

What does the job involve?

The Security, Cyber & Resilience Manager will lead and coordinate security, cybersecurity and resilience activities for Equinor’s offshore wind business in Poland. The role will protect offshore and onshore energy assets, people, information, technology, operations and critical services, with particular focus on national critical infrastructure and the transition from projects into operations.

What will my tasks be?

Within This Position, Your Key Tasks Will Be To

Security and critical infrastructure

• Lead the identification, assessment and treatment of security risks affecting offshore wind farms, onshore facilities, personnel, contractors, suppliers, critical services and business continuity.
• Own and coordinate critical infrastructure protection and resilience planning, including required security documentation, protective measures, exercises, assurance, reporting and improvement follow-up.
• Manage physical and technical security programmes, including access control, guarding, surveillance, intrusion detection, security procedures, awareness and training.
• Coordinate the secure handling of classified and sensitive security information, including need-to-know arrangements and applicable screening, vetting and access requirements.

Cyber and cyber-physical resilience

• Act as the Poland business focal point for cybersecurity and cyber-physical resilience, working with enterprise cybersecurity, IT and OT specialists to ensure clear ownership and effective implementation.
• Coordinate cyber risk assessments and security requirements for IT, OT/ICS, communications, digital services and connected operational systems across the asset lifecycle.
• Ensure that cybersecurity, incident response, recovery, supply-chain security and assurance requirements are integrated into projects, contracts, operational procedures and management reporting.
• Support coordinated response to cyber and hybrid incidents, including escalation, crisis interfaces, lessons learned and corrective actions.

Regulatory compliance and assurance

• Coordinate security and resilience compliance in Poland, including applicable requirements concerning national critical infrastructure, the Polish National Cybersecurity System, NIS2, CER and related implementing legislation and guidance.
• Monitor emerging Polish and EU requirements and authority expectations, assess business impact, and translate them into actionable governance, controls, plans and evidence.
• Maintain an integrated obligations register covering relevant legal, regulatory, licence, permit and corporate requirements, with clear ownership, implementation status and evidence of compliance.
• Drive assurance programmes, compliance assessments, audit readiness, management reviews and closure of identified gaps across projects and operational assets.

Preparedness, continuity and incident management

• Strengthen emergency preparedness, security incident management, crisis interfaces and business continuity through plans, exercises, testing, lessons learned and corrective actions.
• Promote an all-hazards resilience approach covering physical, cyber, personnel, supply-chain, maritime, geopolitical and operational disruption scenarios.
• Ensure that security and resilience dependencies, recovery priorities and continuity requirements are understood by relevant asset and support teams.

Stakeholder engagement and leadership support

• Serve as the primary Poland security interface towards relevant authorities and external stakeholders, coordinated with management and corporate security functions.
• Monitor threat information and geopolitical developments, assess potential implications for offshore wind activities and provide concise recommendations to management and operational stakeholders.
• Provide senior management and boards with integrated security, cyber and resilience reporting, risk assessments, regulatory updates, assurance status and recommended risk-treatment decisions.
• Build a strong security and resilience culture across employees, contractors, partners and suppliers.

Here’s What We Expect From You

At Equinor, there are some overall qualities we regard as essential. We want you to identify with the values that guide our decisions and help us succeed and grow: open, collaborative, courageous and caring. We expect you to make safety your priority and to contribute to our zero-harm culture. And for this specific position, we are also looking for:

Required

• University degree in security, cybersecurity, risk management, engineering, law, public administration or a related discipline.
• 10+ years of relevant experience across security, cybersecurity, resilience, critical infrastructure, risk management or regulatory compliance.
• Experience from energy, utilities, offshore, maritime, defence, transportation or another critical-infrastructure sector.
• Strong understanding of Polish critical-infrastructure protection and relevant EU security, resilience and cybersecurity frameworks.
• Working knowledge of NIS2, the Polish National Cybersecurity System, CER and related governance, assurance and compliance expectations.
• Practical understanding of cyber risk and the interfaces between enterprise IT, OT/ICS and physical security. The role need not be the technical system owner, but must be able to challenge, coordinate and assure specialist delivery.
• Experience engaging with regulators, public authorities, emergency services or security agencies, and managing audits, assurance or compliance programs.
• Strong judgement, stakeholder management, communication and influencing skills.
• Fluency in Polish and English language is required.

Preferred

• Experience in offshore wind, offshore operations, oil and gas or large-scale energy infrastructure.
• Knowledge of OT/ICS security, cyber-physical risk and security-by-design across major projects and operational assets.
• Experience with crisis management, emergency preparedness, incident response and business continuity.
• Experience working with classified or sensitive security information; existing clearance is an advantage where relevant.

What can we offer you?

We want you to have a rewarding and fulfilling work life. That’s why we offer:

Not just a job - a career

In Equinor, your development begins on day one. You will build your competence through a wide range of learning activities while being empowered to build your career across multiple disciplines and geographies. Our internal job market allows a wide range of opportunities for development and growth within your own field, or even in other areas you find interesting and relevant.

Attractive rewards

We give you a comprehensive benefits package with a competitive salary, global parental leave, bonus scheme and pension plan.

Wellness and work-life balance

We care about and prioritise our employees’ well‑being. We know that for you to be the best version of yourself in the workplace, being able to collect your children, attend a class or simply enjoy social time can be invaluable. That’s why we encourage you to make use of our flexible work arrangements wherever possible.

An inclusive culture

We believe embracing our differences makes us stronger. For us, true inclusion means being able to bring your whole self to work, and for you and everyone else to feel accepted and valued.

Equal opportunities for everyone

Equinor is an equal‑opportunity employer. We make all employment decisions, which include hiring, promotion, transfer, demotion, termination, and training, without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, parental status, veteran status, or any other protected status.

As part of this commitment, reasonable adjustments will be made during the recruitment process for candidates with disabilities or long‑term health conditions. If you have any specific requirements, please clarify this in your application and our team will be in contact to see how we can support your needs.

We also believe everyone should be paid fairly and consistently for their contribution to our collective success. To ensure fairness and transparency, positions at Equinor are evaluated using our global job architecture based on the position’s responsibilities, complexity, and impact, and regularly reviewed to ensure consistency and alignment across the organisation.

Important notes about the application process

We expect you to openly offer all relevant information about yourself during the recruitment process. Background checks are performed on all final candidates, and all permanent and temporary hires will be screened using relevant sanctions lists to ensure compliance with sanctions laws. When applying for a job in Norway you will be asked for information on affiliation to high‑risk countries for a security assessment.

About Equinor

Equinor is an international energy company headquartered in Norway, energising the lives of 170 million people worldwide. Our ambition is to be a leading company in the energy transition and achieve net zero by 2050. Our task is enormous: supplying the world with the energy it needs, while lowering emissions to the atmosphere. To achieve it, we are looking for like‑minded people to join our team of 25,000 colleagues working in more than 20 countries. We’re up for the challenge. Are you?