The OT Security & Governance role establishes and maintains OT governance across Greenvolt, defining standards, controls and decision frameworks and overseeing third-party compliance throughout the asset lifecycle.

The main responsibilities are:

- Own, maintain and continuously improve Greenvolt’s OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS, control requirements, decision rights and accountabilities.

- Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and applicable data-protection obligations, translating them into practical requirements for projects and operating assets.

- Coordinate OT risk assessments and risk analysis, review and challenge remediation plans, support internal and external audits, and monitor compliance and residual-risk status through closure.

- Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M; providers; challenge supplier deliverables and evidence; and govern contractor and third-party access models.

- Govern exceptions and deviations from OT standards, ensuring each is documented, risk-assessed, formally approved, time-bound, supported by compensating controls and tracked to closure.

- Establish OT governance and compliance reporting, metrics and management information; communicate trends, material risks, non-compliance and improvement priorities to governance forums and decision-makers.

- Act as Greenvolt’s senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries,



providing guidance and training, and promoting consistent adoption and continual improvement of governance practices.

Requirements

- Bachelor’s degree in engineering, Electrical Engineering, Automation, Telecommunications or a related discipline.

- Relevant postgraduate qualification or professional certifications in cybersecurity, OT security or risk management are highly valued.

- 4-7 years of experience in Operational Technology (OT), SCADA, OT governance, renewables, utilities or similar industrial environments.

- Experience working across the OT asset lifecycle, including commissioning, operations and maintenance and reviewing and validating technical solutions and deliverables provided by EPCs, OEMs and service providers.

- Good understanding of SCADA systems, industrial communications, OT networking and remote access.

- Experience within Solar PV, Wind and/or BESS environments.

- Experience in control centres, remote operations centres or Centres of Excellence (CoE) is highly valued.

- Strong working knowledge of NIS2, IEC 62443 and ISO 27001, together with OT risk-management and audit practices.

- Experience in renewable-energy or other industrial OT environments is highly valued.

- Fluent in English

- Strong engineering and analytical mindset.

- Ability to assess technical risks and challenge suppliers and contractors constructively.

- Strong communication and stakeholder management skills.

- Ability to challenge contractors and suppliers constructively and communicate risks, exceptions and remediation priorities clearly.

- Proactive, autonomous and solution-oriented approach.

📌 OT Security & Governance (Madrid)
🏢 Greenvolt
📍 Madrid