Cyber Security Officer - Offshore Wind at vattenfall

Amsterdam, North Holland, Netherlands -

Full Time

Start Date

Immediate

Expiry Date

08 Mar, 26

Salary

0.0

Posted On

08 Dec, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Compliance, Information Security, Quality Management, ISO 27001, NIS2, ISO 27019, Risk Assessment, Documentation, Audit, Collaboration, Analytical Skills, Communication Skills, Project Coordination, Structured Approach, Proactive Attitude, Problem Solving

Industry

Utilities

Description

Company Description Vattenfall is a European energy company with approximately 21 000 employees. For more than 100 years we have electrified industries, supplied energy to people’s homes and modernized our way of living through innovation and cooperation. We are looking for talented individuals who, in addition to their passion for their own role, also have strong team spirit and want to contribute to supporting a meaningful corporate mission. Job Description Within our Digital Engineering division in Project Delivery & Engineering, we deliver and integrate digital solutions that support renewable energy production and ensure reliable operations. As the primary provider of digital solutions for Business Unit Offshore Wind, we manage the entire value chain—from bid acquisition to asset construction and operation—focusing on Operational Technology (OT) and IT. Cybersecurity and compliance are critical pillars in this mission. About the Role We are looking for a Cyber Security Officer to join the first line of defence, strengthening and maintaining Vattenfall Wind’s implementation of structures and processes within ISO 27001, ISO 27019, and directives such as NIS2 and CER, steered through our internal ISMS. In this role, you will play a key part in ensuring continuous improvement and adaptation to evolving regulations, translating complex requirements into practical solutions that create business value. Your Responsibilities Support the organization in fulfilling compliance responsibilities to maintain a high level of compliance risk coverage. Drive the implementation and ongoing maturity of the Information Security Management System (ISMS) and related compliance frameworks, including NIS2, across the organization. Interface with colleagues in 1st line, internal stakeholders, and 2nd line of defence - supporting internal activities leading up to audits, during audits, and afterwards, by consulting on mitigative actions to close non-compliances findings. Translate ISMS requirements and best practices into clear, actionable policies for leadership and employees. Plan and facilitate risk assessments, advise on synergies between identified risks, and connect findings to planned projects. Your work will span strategic planning, hands-on implementation, and documentation, ensuring robust security and compliance practices. Key Tasks Lead the internal adaptation and continues maturity of compliance with regulatory requirements through the ISMS, ensuring compliance with ISO 27001, ISO 27019, NIS2, and CER directives. Coordination & Follow-up: Drive the compliance aspect of project ensuring progress, monitor deliverables, and contribute with data, presentations, and reporting. Documentation & Quality Assurance: Review and develop processes, guidelines, and standards to ensure accuracy, relevance, and accessibility. Audit & Compliance: Participate in internal and external audits, manage deviations, and ensure systems and procedures meet directive requirements. Cross-functional Collaboration: Support colleagues in compliance efforts and foster a strong, cooperative work environment. Location Kolding (DK), Amsterdam (NL) or Stockholm (SWE) Qualifications You have experience in compliance, information security, or quality management within a technical, industrial, or production environment. You are structured, analytical, and thrive in roles where you create clarity and make things happen - even in areas lacking structure. You communicate clearly at all organizational levels and enjoy being a key player in identifying, solving, and implementing solutions. Additionally, you bring: Experience with compliance, information security, or quality systems across requirement scoping, reviewing, and assessing solutions. Ability to balance regulatory requirements with value-driven implementation. Experience with ISO 27001 and preferably NIS2, ISO 27019, or IEC 62443. Strong skills in conveying complex topics in a clear, practical manner. Experience in planning and coordinating activities in large organizations. Excellent written communication skills and command of the English language. Personal qualities: proactive, independent, structured, and collaborative. Additional Information Our offer Good remuneration, a challenging and international work environment, and the possibility to work with some of the best in the field. You will be working in interdisciplinary teams and you can always count on support from committed colleagues. We offer attractive employment conditions and opportunities for personal and professional development. More Information We welcome your application in English, no later than, January 4th 2025. We kindly request that you do not send applications by any means other than via our website and that you refrain from submitting a cover letter with your application. You apply quickly and easily by answering screening questions and attaching your CV. At Vattenfall we are convinced that diversity contributes to build a more profitable and attractive company and we strive to be good role model regarding diversity. Vattenfall works actively for all employees to have the same opportunities and rights regardless of gender, ethnicity, age, transgender identity or expression, religion or other belief, disability or sexual orientation. We look forward to receiving your application!

Responsibilities

The Cyber Security Officer will support compliance responsibilities and drive the implementation of the Information Security Management System (ISMS) across the organization. This role involves translating complex ISMS requirements into actionable policies and facilitating risk assessments.