Cybersecurity Risk & Compliance Engineer – OT

Cubane Solutions AB; Malmö kommun; On-site; SEK 900,000 - 1,100,000; Full time

Job summary

Cubane Solutions AB is seeking an experienced OT cybersecurity professional to support factories in implementing and improving OT security practices, coach superusers, and drive secure operations across manufacturing sites.

The role covers risk assessments against IEC 62443, verification of security controls, secure design collaboration with engineering, and governance reporting to translate cybersecurity risks into actionable business insights.

Qualifications

• Experience in OT/ICS cybersecurity in industrial settings.
• Hands-on OT security/ICSS in industrial environments.
• Ability to translate cybersecurity requirements into practical measures.
• Strong knowledge of IEC 62443.
• Experience with risk assessments and remediation planning.

Responsibilities

• Support OT security practices at manufacturing sites.
• Coach OT Security Superusers and factory teams.
• Assist with system hardening and secure configuration.
• Drive adoption of security controls in daily operations.
• Perform OT risk assessments and gap analyses.
• Verify security controls and remediation progress.
• Work with engineering to ensure secure OT design.
• Provide security recommendations to leadership.

Skills

OT/ICS security

Industrial IT/OT experience

Manufacturing security

IEC 62443

OT risk assessment

Threat modelling

Security controls

System hardening

Engineering collaboration

Communication skills

Pragmatic security

Job description

Responsibilities

Factory Support & Coaching

• Support manufacturing sites in implementing and improving OT security practices.
• Coach OT Security Superusers and factory teams on secure OT operations and best practices.
• Support system hardening and secure configuration of industrial systems.
• Drive the adoption of security controls within daily factory operations.
• Provide practical guidance to factory teams on cybersecurity risks and remediation.

Risk & Compliance

• Perform and support OT cybersecurity risk assessments and gap analyses.
• Conduct verification of security controls across manufacturing sites.
• Assess security posture against IEC 62443 and internal security requirements.
• Identify security gaps and support remediation planning.
• Follow up on remediation activities and improvement actions.

Operational Security Implementation

• Support the deployment and integration of OT security solutions and controls.
• Assist with secure configuration and hardening of industrial systems.
• Work closely with engineering teams to ensure secure system design and implementation.
• Support security improvements across existing OT environments.

OT Development & Project Support

• Support local OT development teams with secure design principles and security requirements.
• Contribute to threat modelling and risk-based decision-making.
• Review proposed OT solutions and changes from a cybersecurity perspective.
• Help ensure cybersecurity is considered from the early stages of OT development and projects.

Governance & Reporting

• Provide clear security recommendations and risk insights to factories and operational governance.
• Track and report security posture, identified risks, remediation activities, and improvement actions.
• Translate technical OT cybersecurity risks into clear business impact.
• Support operational decision-making by providing structured security assessments and recommendations.

Required Skills

• Experience in OT/ICS cybersecurity, preferably within industrial manufacturing.
• Hands‑on experience working with OT security / ICSSecurity in industrial environments.
• Experience supporting cybersecurity across manufacturing or production sites.
• Strong understanding of IEC 62443 and OT security principles.
• Experience performing OT risk assessments and gap analyses.
• Experience with threat modelling and risk-based security decisions.
• Experience implementing and verifying cybersecurity controls.
• Experience with system hardening and secure configuration of industrial systems.
• Experience working closely with OT, engineering, automation, or manufacturing teams.
• Ability to translate cybersecurity requirements into practical measures within operational environments.
• Experience supporting security remediation and continuous improvement activities.
• Strong understanding of the differences between IT and OT security requirements and operational constraints.
• Ability to coach and guide technical and operational teams.
• Strong communication skills and ability to explain technical security risks to both technical and non-technical stakeholders.
• Structured and pragmatic approach to cybersecurity in production environments.

Desired Skills

• ICS / SCADA security.
• Industrial networks.
• OT asset management.
• Network segmentation.
• Secure remote access.
• Endpoint security in OT environments.
• Vulnerability management.
• Security monitoring.
• Industrial automation.
• OT incident response.
• Secure system design.
• Security architecture.
• NIST Cybersecurity Framework.
• ISO 27001.
• Risk management and security governance.