Senior OT Security Leader: Industrial Control & Risk

Join us in this role where you’ll be working as a Senior Operational Technology (OT) Security Officer to strengthen the security, resilience, and compliance of Ørsted Bioenergy. In this role, you will act as a trusted security lead across OT, IT, engineering, and operations, helping protect critical systems while enabling safe, reliable, and efficient operations. Further more we are partnering with operations, engineering, maintenance, IT, and third-party vendors to ensure security controls are practical, risk-based, and compatible with operational safety and availability – and we “translate” technical cyber risk into clear business, safety, and operational impact requirements. We operate in complex, multi-site, international, or safety-critical operational environments.

Welcome to Bioenergy
You’ll be part of OT Security where you, together with your colleagues, will be working on Ørsted Danish powerplant. Our task is to protect the powerplants ability to produce electricity and heat against hacker attacks. So you need to understand Danish, when you’re out on the powerplants. We are a small team of 4 persons located in Jutland (Jylland) who works together and strive in helping each other in our daily tasks. As a team, we have an open and direct commutation where we discuss ideas strategy and ideas to develop and mature our solutions, so they are robust and they deal with the reality we face.

You’ll play an important role in:

• leading the development and continuous improvement of OT security governance, policies, standards, and procedures
• assessing, managing, and reducing cyber risk across OT environments, including industrial control systems, SCADA, PLCs, IIoT, and related networks
• defining and supporting secure OT architecture, including network segmentation, secure remote access, asset visibility, access control, logging, monitoring, and vulnerability management
• conducting OT security risk assessments, gap analyses, and maturity reviews aligned with recognised frameworks e.g. Danish legislation “Lov om styrket Beredskab i Energisektoren ”, IEC 62443, ISO 27001 and relevant regulatory requirements
• partnering with operations, engineering, maintenance, IT, and third-party vendors to ensure security controls are practical, risk-based, and compatible with operational safety and availability requirements
• driving OT security awareness and training for technical and operational teams.

To succeed in the role, you:

• hold a relevant degree in Engineering, Computer Science, Cyber Security, Information Technology, Automation, or equivalent practical experience
• understand and know how to operate in ICS systems and possess understanding of 24/7 production environment
• are familiar with IT networks like, Purdue model, firewall, data diodes etc.
• hold knowledge about EIC 62433, ISO 27001 and "Lov om styrket Beredskab i Energisektoren" as we operate according to this legislation
• are a good team player and at the same are strong on being responsible of incl. conducting your own tasks – you need to be fluent in both Danish and English language as well due to nature our stake holder landscape
• are flexible - both in terms of taking on tasks outside your comfortzone, being curious in learning new areas and assist your team in whatever tasks are needed.

Some travel within Denmark to the different sites must be expected in the this role.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team, we still encourage you to apply.

Shape the future with us
Send your application and CV to us as soon as possible. We’ll be conducting interviews on a continuous basis and reserve the right to take down the advert when we’ve found the right candidate.

As an applicant or employee, you may request reasonable work and position accommodation or adjustments via

Please note that for your application to be taken into consideration, you must submit your application via our online career pages and answer the screening questions relevant for your country. We don't take applications or inquiries from external recruiters or agencies into account for this position.