# OT Security & Governance

> Greenvolt · Madrid, Spain (Hybrid) · Full-time · Posted 2026-10-15

**Workplace:** hybrid

**Department:** GREENVOLT POWER SPAIN S.L.U.

## Description

The OT Security & Governance role establishes and maintains OT governance across Greenvolt, defining standards, controls and decision frameworks and overseeing third-party compliance throughout the asset lifecycle.

**The main responsibilities are:**

-   Own, maintain and continuously improve Greenvolt’s OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS, control requirements, decision rights and accountabilities.
-   Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and applicable data-protection obligations, translating them into practical requirements for projects and operating assets.
-   Coordinate OT risk assessments and risk analysis, review and challenge remediation plans, support internal and external audits, and monitor compliance and residual-risk status through closure.
-   Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M providers; challenge supplier deliverables and evidence; and govern contractor and third-party access models.
-   Govern exceptions and deviations from OT standards, ensuring each is documented, risk-assessed, formally approved, time-bound, supported by compensating controls and tracked to closure.
-   Establish OT governance and compliance reporting, metrics and management information; communicate trends, material risks, non-compliance and improvement priorities to governance forums and decision-makers.
-   Act as Greenvolt’s senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries, providing guidance and training, and promoting consistent adoption and continual improvement of governance practices.

## Requirements

-   Bachelor’s degree in engineering, Electrical Engineering, Automation, Telecommunications or a related discipline.
-   Relevant postgraduate qualification or professional certifications in cybersecurity, OT security or risk management are highly valued.
-   4-7 years of experience in Operational Technology (OT), SCADA, OT governance, renewables, utilities or similar industrial environments.
-   Experience working across the OT asset lifecycle, including commissioning, operations and maintenance and reviewing and validating technical solutions and deliverables provided by EPCs, OEMs and service providers.
-   Good understanding of SCADA systems, industrial communications, OT networking and remote access.
-   Experience within Solar PV, Wind and/or BESS environments.
-   Experience in control centres, remote operations centres or Centres of Excellence (CoE) is highly valued.
-    Strong working knowledge of NIS2, IEC 62443 and ISO 27001, together with OT risk-management and audit practices.
-    Experience in renewable-energy or other industrial OT environments is highly valued.
-   Fluent in English
-   Strong engineering and analytical mindset.
-   Ability to assess technical risks and challenge suppliers and contractors constructively.
-   Strong communication and stakeholder management skills.
-   Ability to challenge contractors and suppliers constructively and communicate risks, exceptions and remediation priorities clearly.
-   Proactive, autonomous and solution-oriented approach.

## Apply

[Apply at Greenvolt](https://apply.workable.com/greenvolt/j/D5A072EA91/apply)

---
Powered by [Workable](https://www.workable.com)