OT SECURITY LEAD TO OX2

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio. YOU WILL OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets. You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments. Your main responsibilities will be to: Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets. Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments. Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design. Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers. Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence. Govern external security partners and managed security service providers, including incident response and security delivery. Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business The role involves collaboration across OX2's international business. YOU ARE You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privile…