OT Security & Governance

• Bachelor's degree in engineering, Electrical Engineering, Automation, Telecommunications or a related discipline.
• 4-7 years of experience in Operational Technology (OT), SCADA, OT governance, renewables, utilities or similar industrial environments.
• Experience working across the OT asset lifecycle, including commissioning, operations and maintenance and reviewing and validating technical solutions and deliverables provided by EPCs, OEMs and service providers.
• Good understanding of SCADA systems, industrial communications, OT networking and remote access.
• Experience within Solar PV, Wind and/or BESS environments.
• Strong working knowledge of NIS2, IEC 62443 and ISO 27001, together with OT risk-management and audit practices.
• Fluent in English
• Strong engineering and analytical mindset.
• Ability to assess technical risks and challenge suppliers and contractors constructively.
• Strong communication and stakeholder management skills.
• Ability to challenge contractors and suppliers constructively and communicate risks, exceptions and remediation priorities clearly.
• Proactive, autonomous and solution-oriented approach.

• Relevant postgraduate qualification or professional certifications in cybersecurity, OT security or risk management are highly valued.
• Experience in control centres, remote operations centres or Centres of Excellence (CoE) is highly valued.
• Experience in renewable-energy or other industrial OT environments is highly valued.

The OT Security & Governance role establishes and maintains OT governance across Greenvolt, defining standards, controls and decision frameworks and overseeing third-party compliance throughout the asset lifecycle.

• Own, maintain and continuously improve Greenvolt's OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS, control requirements, decision rights and accountabilities.
• Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and applicable data-protection obligations, translating them into practical requirements for projects and operating assets.
• Coordinate OT risk assessments and risk analysis, review and challenge remediation plans, support internal and external audits, and monitor compliance and residual-risk status through closure.
• Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M providers; challenge supplier deliverables and evidence; and govern contractor and third-party access models.
• Govern exceptions and deviations from OT standards, ensuring each is documented, risk-assessed, formally approved, time-bound, supported by compensating controls and tracked to closure.
• Establish OT governance and compliance reporting, metrics and management information; communicate trends, material risks, non-compliance and improvement priorities to governance forums and decision-makers.
• Act as Greenvolt's senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries, providing guidance and training, and promoting consistent adoption and continual improvement of governance practices.