Security, Cyber & Resilience Manager

Equinor; Województwo pomorskie; Vor Ort; PLN 420.000 - 620.000; Vollzeit

Zusammenfassung

Equinor is seeking a Security, Cyber & Resilience Manager to lead security, cyber and resilience activities for its offshore wind business in Poland. The role protects assets, people, information and services across offshore and onshore operations with emphasis on national critical infrastructure.

You will oversee risk assessment, protection programs and governance, coordinating with security, IT/OT teams and authorities to ensure secure operations and compliant practices.

Qualifikationen

• University degree in security, cybersecurity, risk management, engineering, law, public administration or related discipline.
• 10+ years of relevant experience across security, cybersecurity, resilience, critical infrastructure, risk management or regulatory compliance.
• Experience from energy, utilities, offshore, maritime, defence, transportation or another critical-infrastructure sector.
• Strong understanding of Polish critical-infrastructure protection and relevant EU security, resilience and cybersecurity frameworks.
• Working knowledge of NIS2, the Polish National Cybersecurity System, CER and related governance, assurance and compliance expectations.
• Practical understanding of cyber risk and the interfaces between enterprise IT, OT/ICS and physical security.

Aufgaben

• Lead identification, assessment and treatment of security risks for offshore wind farms, onshore facilities, personnel and contractors.
• Coordinate critical infrastructure protection, resilience planning, required security documentation and testing.
• Manage physical and technical security programmes including access control, guarding, surveillance, and training.
• Coordinate secure handling of classified information with need-to-know and screening requirements.
• Act as Poland focal point for cybersecurity and cyber-physical resilience, coordinating with IT/OT specialists.
• Ensure cybersecurity and resilience requirements are integrated into projects, contracts and procedures.
• Support incident response, crisis interfaces, lessons learned and corrective actions.
• Provide integrated security reporting and governance updates to management and stakeholders.

Kenntnisse

Security management

Cybersecurity

Risk management

Regulatory understanding

Stakeholder engagement

Ausbildung

University degree in security, cybersecurity, risk management, or related discipline

Jobbeschreibung

What does the job involve?

The Security, Cyber & Resilience Manager will lead and coordinate security, cybersecurity and resilience activities for Equinor’s offshore wind business in Poland. The role will protect offshore and onshore energy assets, people, information, technology, operations and critical services, with particular focus on national critical infrastructure and the transition from projects into operations.

What will my tasks be?

Within This Position, Your Key Tasks Will Be To

Security and critical infrastructure

• Lead the identification, assessment and treatment of security risks affecting offshore wind farms, onshore facilities, personnel, contractors, suppliers, critical services and business continuity.
• Own and coordinate critical infrastructure protection and resilience planning, including required security documentation, protective measures, exercises, assurance, reporting and improvement follow-up.
• Manage physical and technical security programmes, including access control, guarding, surveillance, intrusion detection, security procedures, awareness and training.
• Coordinate the secure handling of classified and sensitive security information, including need-to-know arrangements and applicable screening, vetting and access requirements.

Cyber and cyber-physical resilience

• Act as the Poland business focal point for cybersecurity and cyber-physical resilience, working with enterprise cybersecurity, IT and OT specialists to ensure clear ownership and effective implementation.
• Coordinate cyber risk assessments and security requirements for IT, OT/ICS, communications, digital services and connected operational systems across the asset lifecycle.
• Ensure that cybersecurity, incident response, recovery, supply-chain security and assurance requirements are integrated into projects, contracts, operational procedures and management reporting.
• Support coordinated response to cyber and hybrid incidents, including escalation, crisis interfaces, lessons learned and corrective actions.

Regulatory compliance and assurance

• Coordinate security and resilience compliance in Poland, including applicable requirements concerning national critical infrastructure, the Polish National Cybersecurity System, NIS2, CER and related implementing legislation and guidance.
• Monitor emerging Polish and EU requirements and authority expectations, assess business impact, and translate them into actionable governance, controls, plans and evidence.
• Maintain an integrated obligations register covering relevant legal, regulatory, licence, permit and corporate requirements, with clear ownership, implementation status and evidence of compliance.
• Drive assurance programmes, compliance assessments, audit readiness, management reviews and closure of identified gaps across projects and operational assets.

Preparedness, continuity and incident management

• Strengthen emergency preparedness, security incident management, crisis interfaces and business continuity through plans, exercises, testing, lessons learned and corrective actions.
• Promote an all-hazards resilience approach covering physical, cyber, personnel, supply-chain, maritime, geopolitical and operational disruption scenarios.
• Ensure that security and resilience dependencies, recovery priorities and continuity requirements are understood by relevant asset and support teams.

Stakeholder engagement and leadership support

• Serve as the primary Poland security interface towards relevant authorities and external stakeholders, coordinated with management and corporate security functions.
• Monitor threat information and geopolitical developments, assess potential implications for offshore wind activities and provide concise recommendations to management and operational stakeholders.
• Provide senior management and boards with integrated security, cyber and resilience reporting, risk assessments, regulatory updates, assurance status and recommended risk-treatment decisions.
• Build a strong security and resilience culture across employees, contractors, partners and suppliers.

Here’s What We Expect From You

At Equinor, there are some overall qualities we regard as essential. We want you to identify with the values that guide our decisions and help us succeed and grow: open, collaborative, courageous and caring. We expect you to make safety your priority and to contribute to our zero-harm culture. And for this specific position, we are also looking for:

Required

• University degree in security, cybersecurity, risk management, engineering, law, public administration or a related discipline.
• 10+ years of relevant experience across security, cybersecurity, resilience, critical infrastructure, risk management or regulatory compliance.
• Experience from energy, utilities, offshore, maritime, defence, transportation or another critical-infrastructure sector.
• Strong understanding of Polish critical-infrastructure protection and relevant EU security, resilience and cybersecurity frameworks.
• Working knowledge of NIS2, the Polish National Cybersecurity System, CER and related governance, assurance and compliance expectations.
• Practical understanding of cyber risk and the interfaces between enterprise IT, OT/ICS and physical security. The role need not be the technical system owner, but must be able to challenge, coordinate and assure specialist delivery.
• Experience engaging with regulators, public authorities, emergency services or security agencies, and managing audits, assurance or compliance programs.
• Strong judgement, stakeholder management, communication and influencing skills.
• Fluency in Polish and English language is required.

Preferred

• Experience in offshore wind, offshore operations, oil and gas or large-scale energy infrastructure.
• Knowledge of OT/ICS security, cyber-physical risk and security-by-design across major projects and operational assets.
• Experience with crisis management, emergency preparedness, incident response and business continuity.
• Experience working with classified or sensitive security information; existing clearance is an advantage where relevant.

What can we offer you?

We want you to have a rewarding and fulfilling work life. That’s why we offer:

Not just a job - a career

In Equinor, your development begins on day one. You will build your competence through a wide range of learning activities while being empowered to build your career across multiple disciplines and geographies. Our internal job market allows a wide range of opportunities for development and growth within your own field, or even in other areas you find interesting and relevant.

Attractive rewards

We give you a comprehensive benefits package with a competitive salary, global parental leave, bonus scheme and pension plan.

Wellness and work-life balance

We care about and prioritise our employees’ well‑being. We know that for you to be the best version of yourself in the workplace, being able to collect your children, attend a class or simply enjoy social time can be invaluable. That’s why we encourage you to make use of our flexible work arrangements wherever possible.

An inclusive culture

We believe embracing our differences makes us stronger. For us, true inclusion means being able to bring your whole self to work, and for you and everyone else to feel accepted and valued.

Equal opportunities for everyone

Equinor is an equal‑opportunity employer. We make all employment decisions, which include hiring, promotion, transfer, demotion, termination, and training, without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, parental status, veteran status, or any other protected status.

As part of this commitment, reasonable adjustments will be made during the recruitment process for candidates with disabilities or long‑term health conditions. If you have any specific requirements, please clarify this in your application and our team will be in contact to see how we can support your needs.

We also believe everyone should be paid fairly and consistently for their contribution to our collective success. To ensure fairness and transparency, positions at Equinor are evaluated using our global job architecture based on the position’s responsibilities, complexity, and impact, and regularly reviewed to ensure consistency and alignment across the organisation.

Important notes about the application process

We expect you to openly offer all relevant information about yourself during the recruitment process. Background checks are performed on all final candidates, and all permanent and temporary hires will be screened using relevant sanctions lists to ensure compliance with sanctions laws. When applying for a job in Norway you will be asked for information on affiliation to high‑risk countries for a security assessment.

About Equinor

Equinor is an international energy company headquartered in Norway, energising the lives of 170 million people worldwide. Our ambition is to be a leading company in the energy transition and achieve net zero by 2050. Our task is enormous: supplying the world with the energy it needs, while lowering emissions to the atmosphere. To achieve it, we are looking for like‑minded people to join our team of 25,000 colleagues working in more than 20 countries. We’re up for the challenge. Are you?