OT Cybersecurity Expert

Edp Renovaveis Servicios Financieros SA; Porto; On-site; EUR 45,000 - 65,000; Full time

Job summary

EDP is seeking an OT Cybersecurity Specialist to strengthen governance, risk, and compliance across industrial OT environments in Porto and beyond.

You will work with cross-functional teams to implement standards like IEC 62443 and NIS2, design secure OT architectures, and lead incident response and vulnerability management initiatives. The role offers hybrid work options with Porto or Madrid workplaces.

Qualifications

• University degree in Electrical, Electronic, Automation, Energy or Telecommunications Engineering or another relevant technical field.
• Additional education in Cybersecurity or Technology Risk Management is a plus.

Responsibilities

• Develop and maintain OT cybersecurity policies and procedures aligned with governance and regulations.
• Support compliance activities for OT cybersecurity frameworks and regulatory requirements such as IEC 62443 and NIS2.
• Participate in risk assessments, gap analyses and audits; define mitigation actions.
• Assist in integrating cybersecurity requirements into OT operations and projects.
• Collaborate with regional stakeholders on compliance roadmaps and action plans.
• Design and review secure OT architectures including network segmentation and remote access.
• Define functional and technical requirements for OT cybersecurity systems.
• Evaluate suppliers and cybersecurity solutions for OT environments.
• Work with Engineering, IT, Operations to embed Security by Design in assets and upgrades.
• Coordinate OT cybersecurity projects ensuring alignment with timelines and deliverables.
• Develop, test and improve OT incident response plans.
• Contribute to vulnerability management and incident analysis in OT.
• Assist in root cause analysis of OT cybersecurity issues.
• Ensure lessons learned improve standards and processes.
• Collaborate in incident response activities and escalation processes.
• Support cybersecurity awareness for OT operations and maintenance teams.
• Participate in drills and tabletop exercises to strengthen incident response capabilities.
• Evaluate new technologies and approaches to improve OT cybersecurity.
• Contribute to OT cybersecurity roadmap aligned with business priorities and regulatory needs.

Skills

OT cybersecurity

IEC 62443

NIS2

Vulnerability management

Incident response

Network segmentation

Remote access security

SOC/SIEM familiarity

Education

Electrical/Electronic/Automation/Engineering degree

Tools

SCADA

PLCs

Industrial networks

SIEM

Job description

Business Platform: Renewable Generation Assets

We are EDP, a global energy company present in around 29 markets with a particular emphasis on renewable energies. With more than 45 years of experience, we have been consolidating a relevant presence on the world energy scene based on the commitment to be all-green by 2030, leading the energy transition. With more than 13,000 employees around the world, we are committed to using our energy and heart to drive a better tomorrow.

The mission of this role is to support the security, resilience, and compliance of RGA’s WS&S Operational Technology (OT) environments across different regions.

The OT Cybersecurity Specialist will contribute to the implementation and continuous improvement of cybersecurity standards, controls, and architectures aligned with EDP Group governance and applicable regulations. The role will support secure operations across the renewable energy portfolio while providing an excellent opportunity to grow in an international OT cybersecurity environment.

This professional will work closely with cross-functional teams, helping to strengthen cybersecurity practices, support projects, and contribute to the consistent application of OT cybersecurity requirements across the organization.

What you will do:

Governance, Policy, and Compliance

• Support the development, maintenance, and communication of OT cybersecurity policies, standards, and procedures aligned with corporate governance and applicable regulations.
• Contribute to compliance activities related to OT cybersecurity frameworks and regulatory requirements, such as IEC 62443, NIS2, and other relevant standards.
• Participate in risk assessments, gap analyses, and audits, helping define mitigation and improvement actions.
• Support the integration of cybersecurity requirements into OT operations and projects.
• Collaborate with regional stakeholders to follow up on compliance roadmaps and action plans.

Projects and Architecture

• Support the design and review of secure OT architectures, including network segmentation, remote access, and data flow control.
• Contribute to the definition of functional and technical requirements for OT cybersecurity systems and solutions.
• Participate in the technical evaluation of suppliers and cybersecurity solutions for OT environments.
• Work with Engineering, IT, and Operations teams to help embed Security by Design in new assets, systems, and upgrades.
• Support the coordination and follow-up of OT cybersecurity projects, ensuring alignment with priorities, timelines, and expected deliverables.

Cybersecurity Operations and Incident Management

• Support the development, testing, and improvement of OT incident response plans in coordination with cybersecurity teams.
• Contribute to vulnerability management, monitoring, and incident analysis activities in OT environments.
• Assist in troubleshooting and root cause analysis of OT cybersecurity-related issues.
• Help ensure that lessons learned from incidents are reflected in standards, processes, and technical improvements.
• Collaborate with internal teams during incident response activities and escalation processes.

Training, Awareness, and Continuous Improvement

• Support cybersecurity awareness initiatives for OT operations and maintenance teams.
• Participate in drills, workshops, and tabletop exercises to strengthen OT incident response capabilities.
• Contribute to the evaluation of new technologies and approaches that can improve OT cybersecurity.

Strategic Initiatives

• Contribute to OT cybersecurity roadmap activities aligned with business priorities and regulatory needs.
• Participate in working groups related to compliance, risk management, and technology standardization.
• Support the rollout of global cybersecurity initiatives, such as monitoring, privileged access, and other security improvement programs.

Employment type: Full-Time

Work site: Hybrid

Work Place: Porto or Madrid

What are we looking for:

• University degree in Electrical, Electronic, Automation, Energy or Telecommunications Engineering, or another relevant technical field.
• Additional education in Cybersecurity or Technology Risk Management is a plus.
• English: fluent (mandatory); Portuguese: fluent (mandatory) and Spanish: highly valued.

A minimum of two years of professional experience in OT, industrial, or critical infrastructure environments.

• Familiarity with systems such as SCADA, PLCs, industrial networks, or similar technologies.
• Exposure to OT cybersecurity topics such as network segmentation, secure remote access, vulnerability management, or compliance activities.
• Experience in industrial infrastructure, energy, utilities, or related sectors is valued.
• Experience working in international or multi-stakeholder environments is a plus.
• Good understanding of OT/ICS cybersecurity concepts and industrial environments.
• Familiarity with industrial communication protocols.
• Understanding of industrial networking concepts such as firewalls, VLANs, VPNs, routing, DMZs, and remote access.
• Awareness of OT cybersecurity frameworks and standards such as IEC 62443, NIST, ISO 27001, NIS2, or similar.
• Exposure to areas such as incident response, asset inventory, monitoring, or vulnerability management is valued.
• Familiarity with SOC, SIEM, or OT monitoring concepts is a plus.
• Good communication and collaboration skills in multicultural environments.
• Analytical mindset and structured problem-solving approach.
• Ability to work across technical and non-technical teams.
• Proactive attitude, accountability, and willingness to learn.
• Ability to manage multiple topics with good organization and follow-up.
• Interest in continuous improvement and development in OT cybersecurity.

More than academic knowledge and technical skills, we are looking for ambitious people who are enthusiastic about the future and who bring human skills aligned with our purpose .

Equal opportunities for all

Our vision is that each person combines their unique characteristics and experiences to fulfill our mission of creating new energy for the planet. We are an inclusive employer, ensuring all candidates are treated fairly throughout the recruitment process. We welcome and value all people, and we are committed to fostering a sense of belonging for each person who is part of the EDP group.

As a top employer we:

• Empower our employees through a positive and innovative work environment that promotes collaboration and agile decision-making;
• Respect and value each person, providing a flexible, healthy, and inclusive workplace with a range of attractive benefits;
• Provide a meaningful work experience and prepare our people for future challenges through different opportunities for development and internal mobility;

Our efforts have resulted in several distinctions over time, highlighting the EDP group's strong positioning and its dedication and commitment to attracting and retaining the best talent:

• Top employer certification by Top Employers Institute
• Part of the Bloomberg Gender-Equality Index
• Top 100 Workplaces by Houston Chronicle

Discove r our tips to enhance your performance during the recruitment process and apply until 12/10/2026 if you think you are the right fit for this opportunity.