OT Cyber Operations Senior Expert

The OT Cyber Operations Senior Expert must assurance operational oversight of OT cybersecurity controls, vulnerabilities, asset visibility and monitoring processes. Working closely with operational stakeholders and defining the OT SOC, to help ensure the operational cyberrisks are identified, monitores and addressed consistently across the organization.

The main responsibilities are:

• Maintain and enhance visibility across Greenvolt's OT environments, ensuring accurate asset inventories, classification and monitoring capabilities are in place.
• Coordinate OT SOC and CSIRT to gain a full coverage for incident response across the organization
• Coordinate OT vulnerability management lifecycle, including vulnerability tracking, remediation follow-up and support for risk assessment processes across operational assets. Maintaining visibility of identified vulnerabilities, prioritising remediation with asset owners, and tracking actions through to risk-based closure
• Support the development and continuous improvement of OT resilience capabilities, including business continuity plans, recovery procedures and operational readiness activities.
• Define and coordinate OT monitoring and detection requirements and playbooks, supporting the implementation and effectiveness of security monitoring, logging and incident detection capabilities.
• Support the integration and operation of OT cybersecurity monitoring services, ensuring effective collaboration with internal teams and external providers.
• Coordinate OT access governance activities, supporting the secure management of vendor, contractor and third-party access to operational technology environments.
• Support OT incident response and investigation activities, maintaining procedures, response plans and testing programmes to ensure readiness across all countries.
• Contribute to the operational execution of OT cybersecurity controls, supporting monitoring, vulnerability management and incident response activities across Greenvolt's OT environments.
• Establish and maintain the OT cybersecurity operating model, governance processes and risk-based priorities, ensuring that material risks, control gaps and remediation decisions are documented and escalated to the appropriate stakeholders.
• Define, monitor and report OT cybersecurity performance indicators, including asset visibility, vulnerability ageing, remediation progress, monitoring coverage, incident trends, access reviews and response readiness.
• Coordinate OT cybersecurity control assessments, audits and compliance activities, maintaining evidence of control effectiveness and overseeing the timely remediation of identified findings.

Requirements

• Bachelor's degree in Engineering, Information Technology, Computer Science, Telecommunications or a related discipline.
• (Valuable) IRCP (Incident Response Certified and/or Master degree Cyber Defense
• 5+ years of experience in cybersecurity operations, vulnerability management, security monitoring, incident response or related functions.
• Experience supporting the operational execution of cybersecurity controls, monitoring processes and vulnerability management activities.
• Experience working with SIEM platforms, security monitoring tools and incident management processes.
• Familiarity with Operational Technology (OT) or industrial environments, including SCADA systems.
• Experience coordinating with SOC teams, service providers and operational stakeholders.
• Experience managing or reviewing third-party and vendor access in regulated or operational environments.
• Knowledge of Microsoft Sentinel, Microsoft Defender XDR or similar security platforms is highly valued.
• Fluent in English
• Strong analytical and problem-solving skills.
• Effective communication and stakeholder management.
• Proactive and continuous improvement mindset.