OT Cybersecurity Expert

EDP; Porto; On-site; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

EDP is seeking an OT Cybersecurity Specialist to strengthen governance, risk, and compliance across OT environments in a hybrid work setting with Porto or Madrid locations.

You will work with Engineering, IT, and Operations to embed Security by Design in assets and projects, align to IEC 62443, NIS2, and related standards, and support ongoing improvements in cybersecurity posture across the organization.

Qualifications

• University degree in Electrical/Automation/Energy/Telecommunications engineering or similar field.
• Fluent English; fluent Portuguese required; Spanish valued.

Responsibilities

• Support governance, policy, and compliance for OT cybersecurity aligned with IEC 62443, NIS2, and related standards.
• Assist in designing secure OT architectures, including network segmentation and secure remote access.
• Contribute to incident response planning, vulnerability management, and incident analysis in OT environments.
• Participate in training, drills, and continuous improvement initiatives for OT cybersecurity.
• Coordinate with cross-functional teams to ensure security requirements are embedded in projects.

Skills

OT cybersecurity knowledge

Communication skills

Analytical mindset

Team collaboration

Multicultural experience

Education

Engineering degree

Cybersecurity education

Tools

SCADA

PLCs

Industrial networks

Job description

We are EDP, a global energy company present in around 29 markets with a particular emphasis on renewable energies. With more than 45 years of experience, we have been consolidating a relevant presence on the world energy scene based on the commitment to be all-green by 2030, leading the energy transition. With more than 13,000 employees around the world, we are committed to using our energy and heart to drive a better tomorrow.

The mission of this role is to support the security, resilience, and compliance of RGA's WS&S Operational Technology (OT) environments across different regions.

The OT Cybersecurity Specialist will contribute to the implementation and continuous improvement of cybersecurity standards, controls, and architectures aligned with EDP Group governance and applicable regulations. The role will support secure operations across the renewable energy portfolio while providing an excellent opportunity to grow in an international OT cybersecurity environment.

This professional will work closely with cross-functional teams, helping to strengthen cybersecurity practices, support projects, and contribute to the consistent application of OT cybersecurity requirements across the organization.

What you will do:

Governance, Policy, and Compliance

• Support the development, maintenance, and communication of OT cybersecurity policies, standards, and procedures aligned with corporate governance and applicable regulations.
• Contribute to compliance activities related to OT cybersecurity frameworks and regulatory requirements, such as IEC 62443, NIS2, and other relevant standards.
• Participate in risk assessments, gap analyses, and audits, helping define mitigation and improvement actions.
• Support the integration of cybersecurity requirements into OT operations and projects.
• Collaborate with regional stakeholders to follow up on compliance roadmaps and action plans.

Projects and Architecture

• Support the design and review of secure OT architectures, including network segmentation, remote access, and data flow control.
• Contribute to the definition of functional and technical requirements for OT cybersecurity systems and solutions.
• Participate in the technical evaluation of suppliers and cybersecurity solutions for OT environments.
• Work with Engineering, IT, and Operations teams to help embed Security by Design in new assets, systems, and upgrades.
• Support the coordination and follow-up of OT cybersecurity projects, ensuring alignment with priorities, timelines, and expected deliverables.

Cybersecurity Operations and Incident Management

• Support the development, testing, and improvement of OT incident response plans in coordination with cybersecurity teams.
• Contribute to vulnerability management, monitoring, and incident analysis activities in OT environments.
• Assist in troubleshooting and root cause analysis of OT cybersecurity-related issues.
• Help ensure that lessons learned from incidents are reflected in standards, processes, and technical improvements.
• Collaborate with internal teams during incident response activities and escalation processes.

Training, Awareness, and Continuous Improvement

• Support cybersecurity awareness initiatives for OT operations and maintenance teams.
• Participate in drills, workshops, and tabletop exercises to strengthen OT incident response capabilities.
• Contribute to the evaluation of new technologies and approaches that can improve OT cybersecurity.

Strategic Initiatives

• Contribute to OT cybersecurity roadmap activities aligned with business priorities and regulatory needs.
• Participate in working groups related to compliance, risk management, and technology standardization.
• Support the rollout of global cybersecurity initiatives, such as monitoring, privileged access, and other security improvement programs.

Employment type: Full-Time

Work site: Hybrid

**Work Place:**Porto or Madrid

What are we looking for:

• University degree in Electrical, Electronic, Automation, Energy or Telecommunications Engineering, or another relevant technical field.
• Additional education in Cybersecurity or Technology Risk Management is a plus.
• English: fluent (mandatory); Portuguese: fluent (mandatory) and Spanish: highly valued.
• A minimum of two years of professional experience in OT, industrial, or critical infrastructure environments.
• Familiarity with systems such as SCADA, PLCs, industrial networks, or similar technologies.
• Exposure to OT cybersecurity topics such as network segmentation, secure remote access, vulnerability management, or compliance activities.
• Experience in industrial infrastructure, energy, utilities, or related sectors is valued.
• Experience working in international or multi-stakeholder environments is a plus.
• Good understanding of OT/ICS cybersecurity concepts and industrial environments.
• Familiarity with industrial communication protocols.
• Understanding of industrial networking concepts such as firewalls, VLANs, VPNs, routing, DMZs, and remote access.
• Awareness of OT cybersecurity frameworks and standards such as IEC 62443, NIST, ISO 27001, NIS2, or similar.
• Exposure to areas such as incident response, asset inventory, monitoring, or vulnerability management is valued.
• Familiarity with SOC, SIEM, or OT monitoring concepts is a plus.
• Good communication and collaboration skills in multicultural environments.
• Analytical mindset and structured problem-solving approach.
• Ability to work across technical and non-technical teams.
• Proactive attitude, accountability, and willingness to learn.
• Ability to manage multiple topics with good organization and follow-up.
• Interest in continuous improvement and development in OT cybersecurity.

More than academic knowledge and technical skills, we are looking for ambitious people who are enthusiastic about the future and who bring human skills aligned with our purpose.

Equal opportunities for all

Our vision is that each person combines their unique characteristics and experiences to fulfill our mission of creating new energy for the planet. We are an inclusive employer, ensuring all candidates are treated fairly throughout the recruitment process. We welcome and value all people, and we are committed to fostering a sense of belonging for each person who is part of the EDP group.