Cyber Security Specialist

Vestas; Leça do Balio; Presencial; EUR 70 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

International environment

Resumo da oferta

Vestas is seeking an experienced OT cybersecurity professional to join the Global Service Operations team. You will design secure OT services, embed cybersecurity by design, and collaborate with service designers, engineers, SOC, and plant stakeholders.

You will ensure compliance with IEC 62443 and ISO standards, validate security controls before go‑live, and contribute to risk‑based decision making and continuous security improvements.

Qualificações

• Education: Bachelor's or master's degree in Cybersecurity, Information Technology, Automation, Engineering, or a related field
• Experience: 3+ years of cybersecurity experience with a focus on OT/ICS and security‑by‑design
• CISSP, CISM, or equivalent certifications
• Technical background: industrial networks, SCADA, and IT interaction
• Familiarity with SOC processes and OT incident response

Responsabilidades

• Security by Design for OT Services: embed cybersecurity requirements and architectures into design and lifecycle
• Standards, Compliance & Governance: ensure OT services comply with policies and audits
• Design Validation & Transition Support: validate controls before go‑live and support readiness reviews
• Stakeholder Collaboration & Advisory: work with design owners, architects, engineers, SOC/ROC and plant stakeholders
• Lifecycle & Continuous Improvement: contribute to technology refresh, vulnerability remediation, and decommissioning

Conhecimentos

OT Cybersecurity

Risk-Based Decision Making

Service & Systems Thinking

Standards & Framework Application

Collaboration & Teamwork

Communication Skills

Continuous Improvement Mindset

Formação académica

Bachelor's or Master's degree in Cybersecurity/IT/Automation/Engineering

Descrição da oferta de emprego

Are you on the lookout for your next big career move?

Service > Global Service Operations > Plant, Cyber & Digital Operations

The Plant, Cyber & Digital Operations department is responsible for designing, securing, and continuously improving plant operations that support reliable and compliant OT services across regions. It defines the governance for service delivery, ensuring services are secure by design, aligned with industry standards (e.g., IEC 62443, ITIL), and operationally ready. Through close collaboration with engineering, digital, commercial, and plant stakeholders, OT Operations enables resilient operations, manages risk and change, leverages data‑driven performance insights, and supports automation and continuous improvement.

Responsibilities

• Security by Design for OT Services: Embed cybersecurity requirements, controls, and architectures into the design and evolution of OT services, ensuring they are secure, resilient, and fit for safe plant operations across their full lifecycle
• Standards, Compliance & Governance: Ensure OT services comply with applicable cybersecurity standards, policies, and regulatory requirements, and support audits, risk reviews, and exception handling as required
• Design Validation & Transition Support: Validate that required security controls are implemented and tested prior to go‑live, and support service readiness reviews, remediation activities, and secure handover into operations
• Stakeholder Collaboration & Advisory: Work closely with Service Design Owners, Service Design Leads, architects, engineering teams, SOC/ROC, and plant stakeholders to balance security, operability, cost, and performance
• Lifecycle & Continuous Improvement: Provide input to lifecycle planning, including technology refresh, vulnerability remediation, and decommissioning of insecure components, contributing to continuous security improvement of OT services

Qualifications

• Education: Bachelor's or master's degree in Cybersecurity, Information Technology, Automation, Engineering, or a related field
• Experience: 3+ years of cybersecurity experience, with a primary focus on Operational Technology / Industrial Control Systems (ICS). Demonstrated experience integrating cybersecurity into system or service design rather than only operational monitoring
• CISSP, CISM, or equivalent security certifications
• Technical Background: Solid understanding of industrial networks, control systems (SCADA), and their interaction with IT systems
• Familiarity with SOC processes and incident response in OT environments

Competencies

• OT Cybersecurity Skills: Deep understanding of OT threat landscapes, safety‑critical environments, and availability‑driven risk trade‑offs
• Risk‑Based Decision Making: Ability to assess and communicate risk in business and operational terms, enabling informed governance decisions
• Service & Systems Thinking: Practical capability to think in terms of end-to-end services, lifecycles, dependencies, and operational readiness
• Standards & Framework Application: Practical application of IEC 62443, ISO 27001/2, and enterprise security policies within real‑world plant constraints
• Collaboration & Teamwork: Ability to work effectively in cross-functional teams and resolve design trade-offs constructively
• Communication Skills: Clear, structured communication with both technical experts and non‑technical stakeholders, including plant and business leaders
• Continuous Improvement Mindset: Focused approach to improving security posture through lessons learned, new technologies, and evolving best practices

What We Offer

We offer an exciting job in an international environment. You'll be working in a fast-growing team that is playing a central role in growth across the wind energy sector. We put emphasis on developing both personal and professional skills. In return, we expect you to contribute consistently to achieving results.

Additional Information

This is a hybrid position based in Madrid, Spain or Porto, Portugal; and requires up to 20 days of travel per year.

Our commitment to a fair hiring

At Vestas, we evaluate all candidates solely based on their professional experience, education, and relevant skills. To support a fair recruitment process, we kindly ask that you remove any photos, dates of birth or graduation, gender pronouns, marital status, or other personal information not relevant to the role before submitting your CV/resume. Your CV/resume should focus on your professional and educational background, along with the necessary contact details (email and phone number). We train our hiring teams in inclusive evaluation and regularly review process outcomes to ensure fairness.

DEIB Statement

At Vestas, we recognize the value of diversity, equity, and inclusion in driving innovation and success. We strongly encourage individuals from all backgrounds to apply, particularly those who may hesitate due to their identity or feel they do not meet every criterion. As our CEO states, "Expertise and talent come in many forms, and a diverse workforce enhances our ability to think differently and solve the complex challenges of our industry". Your unique perspective is what will help us powering the solution for a sustainable, green energy future.

About Vestas

Vestas is the energy industry’s global partner on sustainable energy solutions. We are specialised in designing, manufacturing, installing, and servicing wind turbines, both onshore and offshore.

Across the globe, we have installed more wind power than anyone else. We consider ourselves pioneers within the industry, as we continuously aim to design new solutions and technologies to create a more sustainable future for all of us. With more than 185 GW of wind power installed worldwide and 40+ years of experience in wind energy, we have an unmatched track record demonstrating our expertise within the field.

With 30,000 employees globally, we are a diverse team united by a common goal: to power the solution – today, tomorrow, and far into the future.

Vestas promotes a diverse workforce which embraces all social identities and is free of any discrimination. We commit to create and sustain an environment that acknowledges and harvests different experiences, skills, and perspectives. We also aim to give everyone equal access to opportunity.

To learn more about our company and life at Vestas, we invite you to visit our website at www.vestas.com and follow us on our social media channels. We also encourage you to join our Talent Universe to receive notifications on new and relevant postings.