信息与网络安全专员

We are looking for a Senior Cybersecurity Officer to join our Digital Security team and take primary responsibility for cybersecurity within Ignitis Renewables company operating in the renewable energy sector.

You will be the key cybersecurity partner for the company, supporting IT and OT initiatives throughout their lifecycle, from security requirements and architecture to risk assessment, supplier evaluation, security acceptance and ongoing risk management.

This is not a hands-on security operations or system administration role. You will not be expected to administer firewalls, monitor SOC alerts, perform penetration testing or operate security tools. Instead, you will use your technical cybersecurity expertise to design security approaches, evaluate risks, challenge proposed solutions and ensure that security requirements are effectively implemented by IT, OT, project teams and suppliers.

You will work closely with the central Digital Security team, which provides common security capabilities, methodologies and SOC services, while you retain cybersecurity ownership for Ignitis Renewables company.

You will contribute to the creation of a secure and green energy ecosystem by:

• Acting as the primary cybersecurity partner for Ignitis Renewables company, taking ownership of its cybersecurity posture and coordinating security matters across IT, OT, business, project teams, suppliers and the central Digital Security team
• Embedding security by design throughout the IT and OT solution lifecycle, from project initiation and procurement to architecture, implementation, security acceptance and ongoing operation
• Defining non-functional security requirements and designing security architecture approaches for IT and OT solutions, including network segmentation, secure remote access, identity and privileged access management, trust boundaries, security logging, monitoring and resilience controls
• Conducting cybersecurity risk assessments and technical security analyses, assessing proposed architectures and determining appropriate security controls, compensating measures and risk treatment options
• Performing cybersecurity assessments of suppliers, technologies and third-party services, including security due diligence, review of supplier evidence and identification of supply-chain risks
• Assessing and maintaining compliance with applicable cybersecurity requirements, including NIS2, ISO/IEC 27001 and IEC 62443, translating regulatory and standards-based requirements into practical IT and OT controls
• Managing security findings, exceptions and risk treatment activities, prioritising remediation, assigning and following up on actions, approving lower-risk exceptions within the delegated authority and escalating material risks for formal acceptance
• Driving continuous cybersecurity improvement, analysing security posture information, proposing new security initiatives, coordinating incident-related actions for the assigned company and communicating key risks, decisions and investment needs to relevant stakeholders

Required for this position

• At least five years of relevant cybersecurity experience, preferably in a senior advisory, security architecture, cybersecurity risk or information security officer role
• Strong ownership and stakeholder-management skills, with demonstrated ability to independently drive cybersecurity matters from identified risk to an agreed and implemented solution
• Proven experience in defining security requirements and reviewing or designing security architecture for IT and OT projects, without necessarily being responsible for detailed engineering or technology administration
• Strong knowledge of cybersecurity risk assessment and control design, including the ability to evaluate technical solutions, identify trust boundaries and recommend proportionate controls or compensating measures
• Experience assessing suppliers, cloud services and third-party technologies, including cybersecurity due diligence, supply-chain risk assessment and critical review of supplier security evidence
• Practical knowledge of cybersecurity standards and regulatory requirements, particularly NIS2, ISO/IEC 27001 and IEC 62443, and the ability to translate them into implementable controls
• Good understanding of enterprise and industrial security concepts, including SCADA and ICS environments, network segmentation, secure remote access, IAM/PAM, hardening, vulnerability management, logging, monitoring, incident response and cyber resilience
• Strong communication, influencing and decision-making skills, including the ability to explain technical risks in business terms, challenge technical teams and suppliers constructively, and balance security requirements with operational, delivery and cost considerations

Would be an advantage

• Certifications such as CISSP, CISM, CRISC, CCSP, SABSA, or ISA/IEC 62443.
• Experience in energy, critical infrastructure, renewable energy, or other industrial environments.

In return for creating a more sustainable future, we promise

• A package of additional benefits to choose from: pension accumulation, health insurance, or another benefit from the selectable benefits list in the MELP application
• Additional paid days for health improvement, short-term illness, volunteering, and accumulated work experience
• A hybrid work model (3+2) and flexible working hours
• Internal career opportunities
• Extensive learning and qualification enhancement programs
• Mentorship-based culture designed to facilitate meaningful and value-driven work
• Take part in an unfolding energy transformation process to create a 100% green and secure energy ecosystem for both current and future generations

As we pursue our strategic goals to increase gender balance in Ignitis Group, we are indicating "f/m/d" next to job titles, meaning we welcome candidates of all genders - female, male or diverse.

Ignitis Group ensures equal opportunities. We welcome all applicants and do not discriminate against race, religion, gender, sexual orientation or gender identity, age, disability or other personal traits unrelated to work obligations.