The posting
How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio. YOU WILL OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets. You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments. Your main responsibilities will be to:
Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.
Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.
Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.
Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.
Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.
Govern external security partners and managed security service providers, including incident response and security delivery.
Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business
The role involves collaboration across OX2's international business.
YOU ARE You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments. Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable. You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience. At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets. WANT TO KNOW MORE? For questions about the role, please contact recruitment consultant Johanna Värmfors at [email protected] or +46 730 821 230, or Artan Bitiqi at [email protected] or +46 723 61 28 44. We are looking forward hearing from you! ABOUT OX2 OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.
