Cybersecutiry Architect

Statkraft has been making clean energy possible for over a century. That’s what we offer. 125 years of unrivalled expertise in supplying the world with what it needs most. We envision a world that runs entirely on renewable energy. Because in the fight against climate change, we don’t see renewable energy as part of the solution – we believe it must be the solution. With us, you’ll shape a career that is truly forward-facing with many amazing opportunities and offerings to match.

The Cybersecurity Architect is an IT specialist who will use his/her high expertise to propose, design and implement security systems according to what business and regulation demands. As a member of the global Cybersecurity team, this role is also responsible for providing support to central IT/OT services delivered in all Statkraft locations around the glob.

• Act as a Security Coordinator for the ISMS implementation, maintenance and improvement.
• Support IT and Process Control risk assessment, evaluate information security risks, threats and consequences and take appropriate action.
• Identify and remediate security vulnerabilities in collaboration with group security functions.
• Proactively evaluate new threats and counter potential information security incidents.
• Contribute to the definition of group policies and actively promote information security standards and procedures throughout the IT, Process control and user environments.
• Monitor security developments to ensure the continued efficiency and effectiveness of information security processes and controls.
• Implements security techniques on all or part of an application, process, network or system within area of responsibility.
• Provide information security training and education.
• Attend Global Security Forum meeting.
• Attend Statkraft Security Champions Summit.
• Act as an interface with corporate team to understand and adopt security policies at a country level.
• Implement security policies to ensure confidentiality, integrity and availability of company information and assets, when it’s necessary.
• Collaborate with global CSIRT team (monitor, prevention, detection, investigation, and response).
• Document and train, a country level procedure, to ensure common understanding of a cybersecurity incident response plan.
• Act as a technical lead during the execution of contracted services, ensuring compliance with scope, objectives, budget, and deadlines.

• Three (3) years of proved experience working on cybersecurity architecture.
• Five (5) years of experience designing, implementing and operating network and security technologies preferably in global organizations. 
• Mandatory certification on any of these: CEH, CISSP, ISO27001 or ISO27032.
• Proved experience operating security devices: Firewalls, Proxy, LDAP, IDS/IPS, SIEM, EDR, etc.
• Advanced understanding of TCP/IP networking.
• Strong knowledge on general information security policies and risk management.
• Experience or knowledge on Industrial Control Systems (ICS).
• Knowledge on OWASP, ITIL, NIST and IEC/ISA 62443.
• University degree in Engineering, any specialization.
• Fluent in Spanish and English, both written and spoken.

• Unlimited learning opportunities at various levels of the organisation
• The chance to grow your career alongside a truly global network of experts, leaders, specialists and graduates from different countries and backgrounds.
• The opportunity to work somewhere with pride, and to be able to honestly say “My work is contributing to saving the planet”.
• A work culture that puts emphasis on the individual, offering flexible working solutions, and work life balance principles.