Lediga job som Säkerhetsstrateg

Vill du använda din erfarenhet inom mjukvara och IT-säkerhet för att bidra till ett säkrare Sverige i en osäker värld?

Då ska du söka dig till oss på avdelningen för krypto och IT-säkerhet på Must! Vi söker nu IT-säkerhetsexperter som vill arbeta med att ta fram de kryptosystem och IT- säkerhetskomponenter som skyddar Sveriges säkerhet.

Huvudsakliga arbetsuppgifter

Rollen IT-säkerhetsspecialist är tydligt inriktad på mjukvara och mjukvarunära IT-säkerhet. Rollen passar dig som vill ta ansvar, påverka tekniska vägval och bidra med djup expertis. Arbetet bedrivs i projektform där du får arbeta tillsammans med några av Sveriges ledande IT-säkerhetsexperter.

I arbetet ingår bland annat att:

• Kravställa och granska kryptosystem, protokoll och IT-säkerhetskomponenter, samt testa och verifiera implementationer av dessa.
• Utvärdera säkerhetsarkitekturer, identifiera sårbarheter, genomföra säkerhetstester, granska kod och ställa krav på produkter och produktutveckling.
• Utveckla våra policyer, standarder och metoder inom IT-säkerhetsområdet.
• Bedriva kontinuerlig och systematisk omvärldsbevakning.

Om enheten

Som IT-säkerhetsexpert på avdelningen för krypto och IT-säkerhet får du möjlighet att arbeta i en miljö där erfarenhet värderas högt, där beslut grundas i teknisk förståelse och där säkerhet är en grundförutsättning inte ett tillägg. Hos oss värdesätts säkerhet, kvalitet och långsiktighet högre än snabba genvägar.  Vi strävar efter att ligga i teknisk framkant och ser kontinuerlig kompetensutveckling som en självklar del av arbetet. Hos oss får du tid, förtroende och stöd att fördjupa dig inom ditt expertområde. Vi samarbetar även nära med andra myndigheter och organisationer, både i Sverige och internationellt.

Vi erbjuder ett viktigt och stimulerande arbete där du dagligen bidrar till Sveriges säkerhet. Vi erbjuder också mycket goda möjligheter till kompetensutveckling. Hos oss finns det friskvårdsmöjligheter som inkluderar träning tre timmar i veckan på arbetstid, samt goda förutsättningar till balans mellan fritid och arbete.

Personliga egenskaperFör att trivas och lyckas i rollen ser vi att du är analytisk. Du tycker om att sätta dig in i komplexa tekniska sammanhang och har förmåga att kritiskt granska kryptosystem, säkerhetsarkitekturer och implementationer för att identifiera risker, sårbarheter och förbättringsområden.

Du är lösningsorienterad och tar gärna initiativ för att driva arbetet framåt. Du tar ansvar för att identifiera säkerhetsutmaningar, hitta lösningar och bidra till välgrundade tekniska vägval.

Noggrannhet är viktigt för dig och du arbetar strukturerat samt med hög precision. Du förstår vikten av detaljer när du kravställer, granskar kod, genomför säkerhetstester och verifierar säkerhetskritiska implementationer.

Du trivs med att arbeta tillsammans med andra och delar gärna med dig av din kunskap. Du bidrar aktivt i projekt och har lätt för att kommunicera och diskutera komplexa säkerhetsfrågor med andra.

Kvalifikationer

• Erfarenhet inom IT-säkerhet och/eller mjukvaruutveckling, alternativt annat för tjänsten relevant område.
• Akademisk utbildning inom relevant område eller motsvarande kompetens förvärvad genom arbetslivserfarenhet.
• Erfarenhet av utveckling i ett etablerat systemprogrammeringsspråk, exempelvis C eller C++.
• God förmåga att läsa och skriva teknisk dokumentation på både svenska och engelska.

Meriterande

• Erfarenhet av att designa, utveckla och leverera säkerhetskritiska system.
• Vana att granska och identifiera brister i design och implementation av säkerhetskritisk mjukvara.
• Erfarenhet av olika utvecklingsmetodiker och att producera robust mjukvara.
• En djup förståelse för hur operativsystem fungerar, exempelvis Linux eller Windows.
• Erfarenhet av inbyggda system eller anpassning av säkerhetsfunktioner i Linux eller Windows.
• Kunskap om systemarkitektur, domänseparation och begrepp som principle of least privilege.
• Erfarenhet av penetrationstestning eller reverse engineering.
• Kunskap om signalskyddssystem.
• Erfarenhet av arbete i Försvarsmakten.

Vid urval kommer stor vikt att läggas vid personliga egenskaper.

 Ovan ställda kvalifikationer ska på begäran kunna verifieras genom intyg, referenser samt arbets- eller urvalstester.

För att myndighetens uppdrag ska vara framgångsrikt förutsätts att alla medarbetare uppträder enligt den värdegrund som finns. Försvarsmaktens värdegrund slår vakt om alla

 människors lika värde, rättvisa och jämlikhet och främjar demokrati och mänskliga rättigheter (läs mer på www.forsvarsmakten.se).

Övrigt

• Anställningsform: Tillsvidareanställning som inleds med provanställning om sex månader
• Tillträde: Enligt överenskommelse
• Arbetsort: Stockholm

För upplysningar om befattningen eller rekryteringsprocessen kontakta: hkv-rekrytering-must@mil.se, vänligen skriv ”IT-säkerhetsexpert L.H.” i ämnesraden.

Fackliga företrädare

Nås via hkv-rekrytering-must@mil.se

Varmt välkommen med din ansökan senast 2026-10-09. I ditt CV och personliga brev vill vi att du beskriver på vilket sätt du uppfyller våra efterfrågade krav och meriter. Du ansöker via jobb.forsvarsmakten.se. Urval sker löpande.

 Ansökningar till denna befattning kommer endast tas emot via Försvarsmaktens webbplats. 

Vill du använda din erfarenhet inom mjukvara och IT-säkerhet för att bidra till ett säkrare Sverige i en osäker värld?

Då ska du söka dig till oss på avdelningen för krypto och IT-säkerhet på Must! Vi söker nu IT-säkerhetsexperter som vill arbeta med att ta fram de kryptosystem och IT- säkerhetskomponenter som skyddar Sveriges säkerhet.

Huvudsakliga arbetsuppgifter

Rollen IT-säkerhetsspecialist är tydligt inriktad på mjukvara och mjukvarunära IT-säkerhet. Rollen passar dig som vill ta ansvar, påverka tekniska vägval och bidra med djup expertis. Arbetet bedrivs i projektform där du får arbeta tillsammans med några av Sveriges ledande IT-säkerhetsexperter.

I arbetet ingår bland annat att:

• Kravställa och granska kryptosystem, protokoll och IT-säkerhetskomponenter, samt testa och verifiera implementationer av dessa.
• Utvärdera säkerhetsarkitekturer, identifiera sårbarheter, genomföra säkerhetstester, granska kod och ställa krav på produkter och produktutveckling.
• Utveckla våra policyer, standarder och metoder inom IT-säkerhetsområdet.
• Bedriva kontinuerlig och systematisk omvärldsbevakning.

Om enheten

Som IT-säkerhetsexpert på avdelningen för krypto och IT-säkerhet får du möjlighet att arbeta i en miljö där erfarenhet värderas högt, där beslut grundas i teknisk förståelse och där säkerhet är en grundförutsättning inte ett tillägg. Hos oss värdesätts säkerhet, kvalitet och långsiktighet högre än snabba genvägar.  Vi strävar efter att ligga i teknisk framkant och ser kontinuerlig kompetensutveckling som en självklar del av arbetet. Hos oss får du tid, förtroende och stöd att fördjupa dig inom ditt expertområde. Vi samarbetar även nära med andra myndigheter och organisationer, både i Sverige och internationellt.

Vi erbjuder ett viktigt och stimulerande arbete där du dagligen bidrar till Sveriges säkerhet. Vi erbjuder också mycket goda möjligheter till kompetensutveckling. Hos oss finns det friskvårdsmöjligheter som inkluderar träning tre timmar i veckan på arbetstid, samt goda förutsättningar till balans mellan fritid och arbete.

Personliga egenskaperFör att trivas och lyckas i rollen ser vi att du är analytisk. Du tycker om att sätta dig in i komplexa tekniska sammanhang och har förmåga att kritiskt granska kryptosystem, säkerhetsarkitekturer och implementationer för att identifiera risker, sårbarheter och förbättringsområden.

Du är lösningsorienterad och tar gärna initiativ för att driva arbetet framåt. Du tar ansvar för att identifiera säkerhetsutmaningar, hitta lösningar och bidra till välgrundade tekniska vägval.

Noggrannhet är viktigt för dig och du arbetar strukturerat samt med hög precision. Du förstår vikten av detaljer när du kravställer, granskar kod, genomför säkerhetstester och verifierar säkerhetskritiska implementationer.

Du trivs med att arbeta tillsammans med andra och delar gärna med dig av din kunskap. Du bidrar aktivt i projekt och har lätt för att kommunicera och diskutera komplexa säkerhetsfrågor med andra.

Kvalifikationer

• Erfarenhet inom IT-säkerhet och/eller mjukvaruutveckling, alternativt annat för tjänsten relevant område.
• Akademisk utbildning inom relevant område eller motsvarande kompetens förvärvad genom arbetslivserfarenhet.
• Erfarenhet av utveckling i ett etablerat systemprogrammeringsspråk, exempelvis C eller C++.
• God förmåga att läsa och skriva teknisk dokumentation på både svenska och engelska.

Meriterande

• Erfarenhet av att designa, utveckla och leverera säkerhetskritiska system.
• Vana att granska och identifiera brister i design och implementation av säkerhetskritisk mjukvara.
• Erfarenhet av olika utvecklingsmetodiker och att producera robust mjukvara.
• En djup förståelse för hur operativsystem fungerar, exempelvis Linux eller Windows.
• Erfarenhet av inbyggda system eller anpassning av säkerhetsfunktioner i Linux eller Windows.
• Kunskap om systemarkitektur, domänseparation och begrepp som principle of least privilege.
• Erfarenhet av penetrationstestning eller reverse engineering.
• Kunskap om signalskyddssystem.
• Erfarenhet av arbete i Försvarsmakten.

Vid urval kommer stor vikt att läggas vid personliga egenskaper.

 Ovan ställda kvalifikationer ska på begäran kunna verifieras genom intyg, referenser samt arbets- eller urvalstester.

För att myndighetens uppdrag ska vara framgångsrikt förutsätts att alla medarbetare uppträder enligt den värdegrund som finns. Försvarsmaktens värdegrund slår vakt om alla

 människors lika värde, rättvisa och jämlikhet och främjar demokrati och mänskliga rättigheter (läs mer på www.forsvarsmakten.se).

Övrigt

• Anställningsform: Tillsvidareanställning som inleds med provanställning om sex månader
• Tillträde: Enligt överenskommelse
• Arbetsort: Stockholm

För upplysningar om befattningen eller rekryteringsprocessen kontakta: hkv-rekrytering-must@mil.se, vänligen skriv ”IT-säkerhetsexpert L.H.” i ämnesraden.

Fackliga företrädare

Nås via hkv-rekrytering-must@mil.se

Varmt välkommen med din ansökan senast 2026-10-09. I ditt CV och personliga brev vill vi att du beskriver på vilket sätt du uppfyller våra efterfrågade krav och meriter. Du ansöker via jobb.forsvarsmakten.se. Urval sker löpande.

 Ansökningar till denna befattning kommer endast tas emot via Försvarsmaktens webbplats. 

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio.

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.

• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.

• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.

• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.

• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.

• Govern external security partners and managed security service providers, including incident response and security delivery.

• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business

• The role involves collaboration across OX2's international business.

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

For questions about the role, please contact recruitment consultant Johanna Värmfors at johanna.varmfors@nexergroup.com or +46 730 821 230, or Artan Bitiqi at artan.bitiqi@nexergroup.com or +46 723 61 28 44.

We are looking forward hearing from you!

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio.

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.

• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.

• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.

• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.

• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.

• Govern external security partners and managed security service providers, including incident response and security delivery.

• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business

• The role involves collaboration across OX2's international business.

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

For questions about the role, please contact recruitment consultant Johanna Värmfors at johanna.varmfors@nexergroup.com or +46 730 821 230, or Artan Bitiqi at artan.bitiqi@nexergroup.com or +46 723 61 28 44.

We are looking forward hearing from you!

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio.

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.

• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.

• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.

• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.

• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.

• Govern external security partners and managed security service providers, including incident response and security delivery.

• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business

• The role involves collaboration across OX2's international business.

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

For questions about the role, please contact recruitment consultant Johanna Värmfors at johanna.varmfors@nexergroup.com or +46 730 821 230, or Artan Bitiqi at artan.bitiqi@nexergroup.com or +46 723 61 28 44.

We are looking forward hearing from you!

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio.

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.

• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.

• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.

• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.

• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.

• Govern external security partners and managed security service providers, including incident response and security delivery.

• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business

• The role involves collaboration across OX2's international business.

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

For questions about the role, please contact recruitment consultant Johanna Värmfors at johanna.varmfors@nexergroup.com or +46 730 821 230, or Artan Bitiqi at artan.bitiqi@nexergroup.com or +46 723 61 28 44.

We are looking forward hearing from you!

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio.

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.

• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.

• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.

• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.

• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.

• Govern external security partners and managed security service providers, including incident response and security delivery.

• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business

• The role involves collaboration across OX2's international business.

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

For questions about the role, please contact recruitment consultant Johanna Värmfors at johanna.varmfors@nexergroup.com or +46 730 821 230, or Artan Bitiqi at artan.bitiqi@nexergroup.com or +46 723 61 28 44.

We are looking forward hearing from you!

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio.

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.

• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.

• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.

• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.

• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.

• Govern external security partners and managed security service providers, including incident response and security delivery.

• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business

• The role involves collaboration across OX2's international business.

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

For questions about the role, please contact recruitment consultant Johanna Värmfors at johanna.varmfors@nexergroup.com or +46 730 821 230, or Artan Bitiqi at artan.bitiqi@nexergroup.com or +46 723 61 28 44.

We are looking forward hearing from you!

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio.

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.

• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.

• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.

• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.

• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.

• Govern external security partners and managed security service providers, including incident response and security delivery.

• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business

• The role involves collaboration across OX2's international business.

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

For questions about the role, please contact recruitment consultant Johanna Värmfors at johanna.varmfors@nexergroup.com or +46 730 821 230, or Artan Bitiqi at artan.bitiqi@nexergroup.com or +46 723 61 28 44.

We are looking forward hearing from you!

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.

How do you secure renewable energy assets where industrial control systems, cloud platforms and cybersecurity come together? At OX2, protecting wind, solar and energy storage facilities mean understanding both the technology behind energy production and the risks that come with connected systems. We are now looking for a OT Security Lead to take ownership of our cybersecurity priorities with operational technology at the center and help shape how security is managed across our growing energy portfolio.

OX2 is a renewable energy company developing, constructing, owning and operating large-scale wind, solar and energy storage projects. As the company expands its role as an independent power producer, cybersecurity is an important part of ensuring that its energy assets and the systems supporting them remain secure and reliable. As OT Security Lead, you will take overall responsibility for cybersecurity across OX2's IT and operational technology environments, with a clear focus on OT. You will work across industrial control systems, cloud platforms and corporate IT, setting security requirements and ensuring that risks are understood and addressed throughout the development and operation of energy assets.

You will make risk-based decisions about which security measures are needed, where they should be implemented and how they should be prioritized across different facilities. Working closely with plant engineers, IT teams, suppliers and senior stakeholders, you will translate security requirements into practical solutions that work in operational environments.

Your main responsibilities will be to:

• Own and prioritize the CSMS pipeline across OX2's wind, solar and energy storage assets.

• Define security architecture and requirements across OT and IT, including SCADA, plant control systems, remote sites, Azure, AWS and SaaS environments.

• Apply IEC 62443 and security principles such as zones and conduits, secure remote access, least privilege and security by design.

• Establish and enforce cybersecurity requirements for suppliers, technology partners and external service providers.

• Assess cybersecurity risks in vendor selection, acquisitions and divestments, contributing to cyber due diligence.

• Govern external security partners and managed security service providers, including incident response and security delivery.

• Translate NIS2 and relevant cybersecurity legislation into practical security measures across the business

• The role involves collaboration across OX2's international business.

You have a strong background in cybersecurity. You understand the challenges of protecting systems where security, availability and operational requirements need to work together. You have worked with OT and industrial control systems, including areas such as SCADA, plant networks and remote access. You have practical experience with IEC 62443 and understand how to apply security principles such as network segmentation, zones and conduits, least privilege and security by design. You also understand the connections between OT, corporate IT and cloud environments.

Your experience extends beyond individual projects. You have taken responsibility for security across multiple sites or technical environments, setting priorities, assessing risks and ensuring that security measures are implemented. You are used to working with external suppliers and know how to establish requirements and challenge solutions. Experience with MSSP governance, incident response or cyber due diligence is particularly valuable.

You are naturally curious and enjoy exploring new technologies and approaches to security. You make well-founded decisions. You can discuss technical details with engineers while explaining risks and priorities clearly to management. Most importantly, you follow through and make sure security requirements lead to real improvements. You have a relevant educational background and are fluent in English. Experience from energy, utilities, industrial automation or other critical infrastructure environments is particularly valuable, but not essential if you bring strong practical OT security experience.

At OX2, you will have the opportunity to influence how cybersecurity is managed across an international portfolio of renewable energy assets. You will work close to the technology behind energy production, with the responsibility and autonomy to develop security capabilities that protect both current operations and future assets.

For questions about the role, please contact recruitment consultant Johanna Värmfors at johanna.varmfors@nexergroup.com or +46 730 821 230, or Artan Bitiqi at artan.bitiqi@nexergroup.com or +46 723 61 28 44.

We are looking forward hearing from you!

OX2 is a renewable energy company accelerating the transition to a sustainable energy system. Through its integrated model as an independent power producer (IPP), OX2 develops, constructs, owns and manages renewable energy assets across onshore and offshore wind, solar and energy storage. With a diversified portfolio of approximately 33 GW across development, construction, asset management and operations, OX2 combines entrepreneurial project development with long-term ownership and value creation. The company operates in five European markets and Australia, has approximately 500 employees, and is headquartered in Stockholm, Sweden. OX2 is owned by EQT, one of the world's largest private equity investors.