OT Cybersecurity Engineer

St1 Oy; Göteborgs kommun; On-site; SEK 900,000 - 1,300,000; Full time

Job summary

St1 is seeking an OT Cybersecurity Engineer to own cybersecurity across its OT estate. You will implement the Cybersecurity Management System (CSMS) for the Gothenburg refinery, terminals and depots, balancing availability and safety with rigorous controls.

You’ll write security standards, validate controls on site, challenge vendors, and act as the trusted OT security adviser to the CISO and refinery teams across the Nordics. Travel across the Nordics and UK is expected.

Qualifications

• Proven track record implementing OT cybersecurity at large production sites.
• Balance governance with technical security expertise.
• Willingness to travel across the Nordics and the UK.
• CISSP or equivalent certification required.

Responsibilities

• Drive site-by-site rollout of OT cybersecurity architecture.
• Set and maintain OT security standards aligned to ISO/IEC 27001, IEC 62443, CIS 18 Controls, and NIS2 obligations.
• Work hands-on across IT and OT systems to specify and validate controls, not to run the plant.
• Challenge OT vendors and advise the CISO and site teams across the Nordics.

Skills

OT cybersecurity

Governance & technical

Vendor management

Security standards

CISSP certified

English fluent

Nordic languages

Travel willing

Job description

Location: #Helsinki, #Stockholm, #Gothenburg or #Turku

Start date: As agreed

Position type: Full-time

Are you an OT Cybersecurity Engineer and a Game Changer?

At St1, we believe data and AI will be a game changer for the energy industry, and we're not waiting to find out. We've already rolled up our sleeves and got to work. We're investing in the team, tools, and culture to lead that shift, and the people we hire now will shape how it happens.

St1 is an energy transition company with the vision to be the leading producer and seller of CO₂-aware energy. St1 operates in Finland, Sweden, Norway, and the United Kingdom. St1’s energy portfolio encompasses oil products, biogas, Sustainable Aviation Fuel (SAF), renewable diesel (HVO) and solar power. Furthermore, St1 is advancing various major energy transition projects, including transition investments at the oil refinery in Gothenburg. St1 has 1,150 retail stations in Finland, Sweden and Norway. St1’s retail network offers marketplaces with fuels, growing number of EV charging and biogas filling points for heavy-duty transport as well as car wash, alongside stand‑alone convenience stores and restaurants. Together, we’re more than 1,000 curious, committed and caring people here to change the game. Ready to challenge the ordinary with us?

About the Role

St1 is on a mission to be the leading producer and seller of CO2-aware energy. Behind that mission sits real, physical infrastructure: the Gothenburg refinery, fuel terminals, marine bases and depots, a growing retail estate that runs everything from car-wash systems to energy distribution, and UK biofuel operations feeding our Gothenburg biorefinery. All of it depends on Operational Technology, and all of it has to be secure.

We are looking for an OT Cybersecurity Engineer to take ownership of cybersecurity across this OT estate. This is a role for someone who is equally at home writing a security standard and sitting at a terminal working through network segmentation, firewall rules, and monitoring coverage. You understand that OT is not IT: long lifecycles, availability comes first, patching windows are scarce, and a security decision can have safety and environmental consequences.

Your first mission is clear. You will implement our Cybersecurity Management System (CSMS) across the OT estate, starting with the correct, site-by-site rollout of our Terminal Cybersecurity Architecture. From there, you scale a consistent OT cybersecurity approach across the wider multi-site footprint.

How you’ll help drive the change

Joining St1, you’ll be part of running and developing a profitable business that invests in long-term energy solutions. Together we achieve the extraordinary through everyday work. As an OT Cybersecurity Engineer, you’ll play a key role in…

• Driving the correct, site-by-site rollout of our OT cybersecurity architecture.
• Setting and maintaining OT security standards aligned to ISO/IEC 27001, IEC 62443, the CIS 18 Controls, and NIS2 obligations in Finland and Sweden.
• Working hands‑on across the IT infrastructure that supports OT and across OT systems themselves, to the level needed to specify and validate controls, not to run the plant.
• Guiding and, where needed, firmly challenging OT vendors on cybersecurity.
• Being the trusted OT security advisor to our CISO, site teams, refinery, and retail operations across the Nordics.

What you bring to the team

We’re looking for a colleague with the drive to challenge, collaborate and grow. To thrive in this role, you likely have:

• A proven track record implementing OT cybersecurity, at least at large production-site level, and multi-site experience is a real plus.
• A genuine mix of governance and technical skill.
• Strong knowledge of OT‑specific constraints and how they differ from IT security.
• The confidence to challenge vendors and the credibility to make it stick.
• CISSP or equivalent certification.
• Fluent English (mandatory); Finnish, Swedish, or Norwegian is preferred.
• A proactive, can‑do mindset and the appetite to work in a lean, fast‑moving organisation where you build the structure rather than inherit it.
• Willingness to travel across the Nordics and the UK.

You are comfortable setting direction and standards, then rolling up sleeves to make them real on site. You create structure where sometimes none exists, challenge vendors and assumptions constructively, and prioritize resilience and availability over theoretical completeness.

Who are we looking for

We are looking for your passion, skills and drive. We're looking for those who recognize the St1 Spirit in themselves: Curious, Commercial, Committed and Caring. This Spirit shows up in daily actions: creating a space where it is safe to be yourself and raise problems early, following through when delivery gets tough, thinking end‑to‑end rather than in silos, and learning faster than the environment changes. Let us know what you can and want to do.

Why Join St1?

• A high‑impact, high‑autonomy role at the center of critical energy infrastructure, in a company moving fast on the energy transition.
• A clear mandate and real ownership: you shape how OT security is done across St1, rather than inheriting someone else's structure.
• The backing of an established CISO function and 24/7 SOC/NOC partners, so you are supported, not alone.
• Work that matters, where a security decision protects real people, safety, and the environment.
• A talented Nordic Business Technology organization with a genuine culture of freedom and responsibility.

How we support your journey

At St1, your safety and wellbeing come first. We offer an open and inclusive workplace where you’re respected and trusted to take initiative. In a hands‑on, informal culture — and a business that never stands still — there’s room to explore ideas and take on new challenges. We support your journey through learning and opportunities to grow across teams and countries.

You’ll have real ownership of cybersecurity across our operational technology estate, working with a wide range of teams; backed by competitive pay, a bonus scheme and genuine opportunities to grow your career.

What to expect after you apply

We welcome applicants from all backgrounds and are committed to an inclusive and equitable recruitment process.

Let’s challenge the ordinary

It takes more than expected to research, develop, produce and invest in the energy transition. But you're not like everyone else – and neither is St1. Step forward and bring what only you can. Together, we make the extraordinary happen through everyday work.