The posting
At Bulk, our mission is to build sustainable infrastructure that supports the digital society of tomorrow. As one of the leading providers of sustainable, high-performance data center solutions in the Nordics, we design and operate infrastructure that powers artificial intelligence and the digital society - efficiently, securely, and with 100% renewable energy. We are now looking to hire our Director Information & Cyber Security, to play a central role in protecting the critical infrastructure our customers and the digital society depend on.
Bulk builds and runs critical infrastructure, and our customers audit us closely. You will own information and cyber security for the whole company, across IT, the OT that runs our sites, and the software we build. This is a business-facing CISO role: you weigh cyber risk against business opportunity with every part of the business.
You will report to the VP Digital & IT, lead the security team and our security partners, and work alongside the leads for physical and personnel security. Bulk is growing fast, and security must keep pace.
What you'll do:
As our Director Information & Cyber Security, your key responsibilities will be:
Business partnership and leadership
- Work strategically with each business unit, weighing cyber risk against opportunity and finding pragmatic ways to enable the business.
- Coordinate enterprise-wide security initiatives across units, sites and countries, with controls that teams work with rather than around.
- Lead and grow the security team, and manage our security partners.
- Align with the leads for physical and personnel security.
Governance and compliance
- Own the information security management system, its policies and controls, and the cyber risk register.
- Own compliance with NIS2 and national security legislation in every country we operate in, and keep us audit-ready.
- Present cyber posture, risk and investment priorities to top leadership and the board.
Scope: IT, OT and what Bulk builds
- IT: identity and access, endpoints, cloud and core business systems.
- OT: site control systems, segmentation, the OT/IT boundary, and access to industrial equipment.
- What Bulk builds: security built into our digital platform and solutions, and clear rules for how people and AI agents use company data.
Detection and response
- Run monitoring and detection with specialist partners.
- Own incident response, test it regularly, and lead real incidents through to closure and notification.
- Keep our defenses current against criminal and state-sponsored adversaries as the regional threat picture and frontier AI change.
- Work with national cyber security authorities and forums.
Customers and supply chain
- Represent Bulk on security to international customers: strategically in sales and design reviews, operationally in audits, escalations and incidents.
- Close the gaps between our framework and what hyperscalers, neoclouds and enterprise customers require.
- Own cyber risk from suppliers and on-site contractors.
Who are you?
You are business-oriented and pragmatic: you weigh cyber risk against opportunity, protect what matters, and say no only when it is warranted. You are an experienced people leader who can coordinate across a whole organization. You speak directly and credibly with demanding customers, in strategy discussions and under operational pressure, and you are as comfortable on the site floor as in the boardroom.
What you bring:
- 10+ years in information and cyber security, as a sitting CISO in an industrial organization (energy, process industry, manufacturing, telecoms or data centers) or as the deputy ready to step up.
- Proven experience leading and developing security teams, and managing external partners.
- A track record of working strategically with business units, leading enterprise-wide initiatives, and presenting to top leadership and a board.
- Direct experience with demanding international customers, both strategically and in difficult operational situations.
- Working knowledge of security across IT, OT and software development.
- Solid knowledge of critical-infrastructure regulation, ISO/IEC 27001 and 27002, IEC 62443 and SOC 2 Type II, and experience taking a management system through external audit.
- Experience leading a real security incident from detection to closure.
- A serious, practical interest in frontier AI as a security question.
- A degree in engineering, computer science or information security, and excellent English.
- An advantage: deep OT experience (building management systems, SCADA, remote and vendor access), security in software development, a Scandinavian language, and CISSP, CISM or GICSP.
Why join us?
- Own information and cyber security for the whole company, across IT, OT and the software Bulk builds itself.
- Build the function and the team behind it as Bulk scales, close enough to the systems and the decisions to shape them.
- Influence how key operational processes are shaped and developed.
- Become part of a growing organization with a strong sustainability mission.
- Work with critical infrastructure that supports the digital society of tomorrow.
- Collaborate with highly skilled colleagues across disciplines and locations.
What we offer our Bulkies:
- A dynamic, growth-oriented workplace with a strong sustainability focus
- Comprehensive insurance (health, travel – business & private) and annual health check
- Additional time off during Easter and Christmas
- Monthly contribution to home internet costs and sustainable commuting
- Annual wellness allowance to support an active lifestyle
- Fully paid parental leave
Take the next step in your career and join us as we build the future of digital infrastructure in Norway and beyond!
Next steps
We review applicants continuously, and we encourage you to apply as soon as possible. To apply, please upload your CV and a cover letter detailing your relevant experience and why you are the ideal candidate for this role.
We conduct background checks on all hires. We may also require you to obtain security clearance and a police certificate of conduct.
Bulk aim for gender balance and a diverse workforce. We do not discriminate against gender, race, ethnicity, religion, sex, sexual orientation, age, pregnancy and/or disability. We appreciate the time you have spent reading this, and if the role aligns with your aspirations, we encourage you to apply!
