Information Security Specialist ISMS (m/f/d), several locations | Ørsted

Join us in this role where you'll be leading the Continental Europe hub with cyber‑secure generation. You will facilitate the rollout of the Information Security Management System (ISMS) across the region, initiate improvements, and report on progress. This includes ensuring that implemented ISMS controls meet organizational and country‑specific legal requirements where ISMS is deployed. As part of Asset Reliability within CE Engineering, you will work with colleagues to secure reliable generation from Continental European assets, optimize operating costs, and consistently deliver high‑quality results on time.

Key Responsibilities

• Developing a roadmap for ISMS implementation across all operational sites in the region.
• Maintaining and improving the cybersecurity risk register, including conducting risk identification and follow‑up workshops with relevant parties, in coordination with global ISMS specialists.
• Owning regional technical cybersecurity risks in close collaboration with the global security team; developing, securing budgets, and implementing risk treatment plans.
• Defining effective business continuity plans for CE SCADA IT/OT systems, maintaining and implementing them in emergency scenarios, and leading event recovery sessions related to the area of expertise.
• Facilitating and supporting regional hub initiatives for continuous ISMS improvement, including instructions, controls, reports, training, or other ISMS‑related work.
• Ensuring development and roll‑out of training to all involved functions and supporting relevant teams in implementing ISMS requirements.
• Planning and conducting audits (internal and external), including drills and follow‑up on findings.
• Establishing, conducting, and following up on regional management reviews in accordance with ISMS requirements.

Qualifications

• Completed degree in Information Security, Cybersecurity, Computer Science, or a related field.
• Proficiency in cybersecurity in IT/OT environments, preferably with in-depth knowledge of ISO27001/27019 and IEC62443; knowledge of national requirements such as NIS‑CAF is an advantage.
• Relevant cybersecurity certifications such as CISSP, CISM, CISA, or CRISC.
• Prior experience working in the energy sector, particularly in a regulated environment such as utilities, renewable energy, or oil and gas.
• Proficiency in risk assessment methodologies, security controls, and incident response management.
• Demonstrated ability to work effectively with external vendors and internal stakeholders to achieve security objectives.
• Experience working independently with direction from multiple stakeholders across various countries.