OT Security Lead

OX2; Stockholms kommun; On-site; SEK 1,000,000 - 1,400,000; Full time

Job summary

OX2, a renewables group, seeks an OT Security Lead responsible for cybersecurity across IT and OT environments including SCADA, plant networks and cloud platforms. You will translate security requirements into practical solutions for energy assets while prioritising risk-based measures and engaging with engineers, suppliers and senior stakeholders.

You will also oversee external security partners and ensure regulatory alignment (NIS2, IEC 62443) across multiple sites, with fluency in English and

Qualifications

• strong background in cybersecurity
• experience with OT and industrial control systems
• familiarity with IEC 62443 and security principles

Responsibilities

• Own and prioritize cybersecurity program across OT and IT environments, including SCADA and cloud platforms.
• Define security architecture and requirements for OT and IT, across plants, remote sites and SaaS environments.
• Apply IEC 62443, zones/conduits, least privilege and security by design to security measures.
• Govern suppliers, MSSPs and external service providers, including incident response and cyber due diligence.

Job description

YOU WILL

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable.

As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.
• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.
• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.
• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.
• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.
• Govern external security partners and managed security service providers, including incident response and security delivery.
• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business
• The role involves collaboration across OX2's international business.

YOU ARE

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

ABOUT OX2

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage.

With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.