Cyber Security Specialist

Are you on the lookout for your next big career move?


Service > Global Service Operations > Plant, Cyber & Digital Operations


The Plant, Cyber & Digital Operations department is responsible for designing, securing, and continuously improving plant operations that support reliable and compliant OT services across regions. It defines the governance for service delivery, ensuring services are secure by design, aligned with industry standards (e.g., IEC 62443, ITIL), and operationally ready. Through close collaboration with engineering, digital, commercial, and plant stakeholders, OT Operations enables resilient operations, manages risk and change, leverages data‑driven performance insights, and supports automation and continuous improvement.


Responsibilities

• Security by Design for OT Services: Embed cybersecurity requirements, controls, and architectures into the design and evolution of OT services, ensuring they are secure, resilient, and fit for safe plant operations across their full lifecycle
• Standards, Compliance & Governance: Ensure OT services comply with applicable cybersecurity standards, policies, and regulatory requirements, and support audits, risk reviews, and exception handling as required
• Design Validation & Transition Support: Validate that required security controls are implemented and tested prior to go‑live, and support service readiness reviews, remediation activities, and secure handover into operations
• Stakeholder Collaboration & Advisory: Work closely with Service Design Owners, Service Design Leads, architects, engineering teams, SOC/ROC, and plant stakeholders to balance security, operability, cost, and performance
• Lifecycle & Continuous Improvement: Provide input to lifecycle planning, including technology refresh, vulnerability remediation, and decommissioning of insecure components, contributing to continuous security improvement of OT services

Qualifications

• Education: Bachelor's or master's degree in Cybersecurity, Information Technology, Automation, Engineering, or a related field
• Experience: 3+ years of cybersecurity experience, with a primary focus on Operational Technology / Industrial Control Systems (ICS). Demonstrated experience integrating cybersecurity into system or service design rather than only operational monitoring
• CISSP, CISM, or equivalent security certifications
• Technical Background: Solid understanding of industrial networks, control systems (SCADA), and their interaction with IT systems
• Familiarity with SOC processes and incident response in OT environments

Competencies

• OT Cybersecurity Skills: Deep understanding of OT threat landscapes, safety‑critical environments, and availability‑driven risk trade‑offs
• Risk‑Based Decision Making: Ability to assess and communicate risk in business and operational terms, enabling informed governance decisions
• Service & Systems Thinking: Practical capability to think in terms of end-to-end services, lifecycles, dependencies, and operational readiness
• Standards & Framework Application: Practical application of IEC 62443, ISO 27001/2, and enterprise security policies within real‑world plant constraints
• Collaboration & Teamwork: Ability to work effectively in cross-functional teams and resolve design trade-offs constructively
• Communication Skills: Clear, structured communication with both technical experts and non‑technical stakeholders, including plant and business leaders
• Continuous Improvement Mindset: Focused approach to improving security posture through lessons learned, new technologies, and evolving best practices

What we offer


We offer an exciting job in an international environment. You'll be working in a fast-growing team that is playing a central role in growth across the wind energy sector. We put emphasis on developing both personal and professional skills. In return, we expect you to contribute consistently to achieving results.


Additional Information


This is a hybrid position based in Madrid, Spain or Porto, Portugal; and requires up to 20 days of travel per year.


We will be reviewing applications on a rolling basis, therefore, early applications are encouraged. To apply for this opportunity, please submit your CV in English.


Please note: We reserve the right to amend or withdraw this job posting at any time.

Our commitment to a fair hiring
At Vestas, we evaluate all candidates solely based on their professional experience, education, and relevant skills. To support a fair recruitment process, we kindly ask that you remove any photos, dates of birth or graduation, gender pronouns, marital status, or other personal information not relevant to the role before submitting your CV/resume. Your CV/resume should focus on your professional and educational background, along with the necessary contact details (email and phone number). We train our hiring teams in inclusive evaluation and regularly review process outcomes to ensure fairness.


DEIB Statement
At Vestas, we recognize the value of diversity, equity, and inclusion in driving innovation and success. We strongly encourage individuals from all backgrounds to apply, particularly those who may hesitate due to their identity or feel they do not meet every criterion. As our CEO states, "Expertise and talent come in many forms, and a diverse workforce enhances our ability to think differently and solve the complex challenges of our industry". Your unique perspective is what will help us powering the solution for a sustainable, green energy future.


BEWARE - RECRUITMENT FRAUD
It has come to our attention that there are a number of fraudulent emails from people pretending to work for Vestas. Read more via this link,


About Vestas
Vestas is the energy industry's global partner on sustainable energy solutions. We are specialised in designing, manufacturing, installing, and servicing wind turbines, both onshore and offshore.
Across the globe, we have installed more wind power than anyone else. We consider ourselves pioneers within the industry, as we continuously aim to design new solutions and technologies to create a more sustainable future for all of us. With more than 185 GW of wind power installed worldwide and 40+ years of experience in wind energy, we have an unmatched track record demonstrating our expertise within the field.
With 30,000 employees globally, we are a diverse team united by a common goal: to power the solution - today, tomorrow, and far into the future.
Vestas promotes a diverse workforce which embraces all social identities and is free of any discrimination. We commit to create and sustain an environment that acknowledges and harvests different experiences, skills, and perspectives. We also aim to give everyone equal access to opportunity.
To learn more about our company and life at Vestas, we invite you to visit our website at and follow us on our social media channels. We also encourage you to join our Talent Universe to receive notifications on new and relevant postings.