The OT Cyber Operations must Assurance Operational oversight of OT cybersecurity controls, vulnerabilities, asset visibility and monitoring processes. Working closely with operational stakeholders and defining the OT SOC, to help ensure the operational cyberrisks are identified, monitores and addressed consistently across the organization.
The main responsibilities are:
- Maintain and enhance visibility across Greenvolt's OT environments, ensuring accurate asset inventories, classification and monitoring capabilities are in place.
- Coordinate OT SOC and CSIRT to gain a full coverage for incident response across the organization
- Coordinate OT vulnerability management lifecycle, including vulnerability tracking, remediation follow-up and support for risk assessment processes across operational assets. Maintaining visibility of identified vulnerabilities, prioritising remediation with asset owners, and tracking actions through to risk-based closure
- Support the development and continuous improvement of OT resilience capabilities, including business continuity plans, recovery procedures and operational readiness activities.
- Define and coordinate OT monitoring and detection requirements and playbooks, supporting the implementation and effectiveness of security monitoring, logging and incident detection capabilities.
- Support the integration and operation of OT cybersecurity monitoring services, ensuring effective collaboration with internal teams and external providers.
- Coordinate OT access governance activities, supporting the secure management of vendor, contractor and third-party access to operational technology environments.
- Support OT incident response and investigation activities, maintaining procedures, response plans and testing programmes to ensure readiness across all countries.
- Contribute to the operational execution of OT cybersecurity controls, supporting monitoring, vulnerability management and incident response activities across Greenvolt's OT environments.
- Establish and maintain the OT cybersecurity operating model, governance processes and risk-based priorities, ensuring that material risks, control gaps and remediation decisions are documented and escalated to the appropriate stakeholders.
- Define, monitor and report OT cybersecurity performance indicators, including asset visibility, vulnerability ageing, remediation progress, monitoring coverage, incident trends, access reviews and response readiness.
- Coordinate OT cybersecurity control assessments, audits and compliance activities, maintaining evidence of control effectiveness and overseeing the timely remediation of identified findings.
Requirements
- Bachelor's degree in Engineering, Information Technology, Computer Science, Telecommunications or a related discipline.
- (Valuable) IRCP (Incident Response Certified and/or Master degree Cyber Defense
- 5+ years of experience in cybersecurity operations, vulnerability management, security monitoring, incident response or related functions.
- Experience supporting the operational execution of cybersecurity controls, monitoring processes and vulnerability management activities.
- Experience working with SIEM platforms, security monitoring tools and incident management processes.
- Familiarity with Operational Technology (OT) or industrial environments, including SCADA systems.
- Experience coordinating with SOC teams, service providers and operational stakeholders.
- Experience managing or reviewing third-party and vendor access in regulated or operational environments.
- Knowledge of Microsoft Sentinel, Microsoft Defender XDR or similar security platforms is highly valued.
- Fluent in English
- Strong analytical and problem-solving skills.
- Effective communication and stakeholder management.
- Proactive and continuous improvement mindset.
Skills Required
- Bachelor's degree in Engineering, Information Technology, Computer Science, Telecommunications, or a related discipline
- 5+ years of experience in cybersecurity operations, vulnerability management, security monitoring, incident response, or related functions
- Experience supporting cybersecurity controls, monitoring processes, and vulnerability management activities
- Experience with SIEM platforms, security monitoring tools, and incident management processes
- Familiarity with Operational Technology or industrial environments, including SCADA systems
- Experience coordinating with SOC teams, service providers, and operational stakeholders
- Experience managing or reviewing third-party and vendor access in regulated or operational environments
- Fluent in English
- IRCP certification or a master's degree in Cyber Defense
- Knowledge of Microsoft Sentinel, Microsoft Defender XDR, or similar security platforms
- Strong analytical and problem-solving skills
- Effective communication and stakeholder management
- Proactive and continuous improvement mindset
What We Do
We are a 100% renewable energy Group with the purpose of creating sustainable value from the sun, wind, and forests, for the benefit of society, shareholders, and employees. Our operations span across 20 geographies in Europe, North America, and Asia, in three core business areas: - Sustainable Biomass – producing energy from forest residues and urban waste wood through 7 power plants in Portugal and the UK. - Utility-Scale – developing large-scale wind, solar PV, and storage projects in several European markets, the USA, and Japan, with a total pipeline of 9.3 GW. - Distributed Generation – focusing on B2B solutions for the installation, maintenance, and financing of solar PV for individual and collective self-consumption, as well as electric mobility, LED, rooftops, carports, and batteries, in several geographies across Europe and Indonesia. Greenvolt Group is increasingly recognized in the global market as a major player in the promotion and development of renewable energy solutions, with more than 900 employees from over 40 different nationalities worldwide.
