OT Technology Assurance
Greenvolt · Madrid, Community of Madrid, Spain · hybrid
The OT Tecnology Assurance engineer acts as the technical authority for OT cybersewcurity across the asset lifecycle, ensuring that designs and systems delivered by EPCs, OEMs and O&M providers comply with Greenvolt requirements, reference architectures and industry best practices. Provides hands-on assurance from design review and technology evaluation through FAT/SAT, commissioning, COD readiness and operational support
The main responsibilities are:
- Maintain and enhance visibility across Greenvolt's OT environments, ensuring accurate asset inventories, classification and monitoring capabilities are in place.
- Review OT security architectures, network segmentation, identity and access management and other key controls, and lead security-by-design reviews across the asset lifecycle.
- Review and assure OT technical deliverables produced by EPCs, OEMs and O&M providers, ensuring alignment with Greenvolt requirements, reference architectures and applicable industry practices for all technologies across the group
- Define and review technical cybersecurity OT acceptance criteria and participate in FAT, SAT and commissioning activities, documenting findings, following up deviations and confirming that agreed requirements are met before acceptance
- Assess OT readiness for Commercial Operation Date, including SCADA functionality, industrial communications, network configuration, system inventories, backups, remote access and operational handover documentation
- Review OT network and SCADA architectures, including segmentation, connectivity, hardening and patching arrangements, and provide technical input to the development and continuous improvement of OT standards.
- Provide OT technical due diligence for acquisitions, repowering initiatives and major asset changes, assessing the condition, suitability, risks and integration requirements of existing and proposed OT environments.
- Support the onboarding and integration of operational assets, coordinating technical interfaces with internal teams, EPCs, OEMs, O&M providers and other third parties to enable a controlled transition into operations.
- Act as the escalation point for complex OT and SCADA issues and significant OT incidents, leading or coordinating technical troubleshooting, root-cause analysis and recovery support.
- Bachelor's degree in Engineering, Information Technology, Computer Science, Telecommunications or a related discipline.
- 5+ years of experience in cybersecurity operations, vulnerability management, security monitoring, incident response or related functions.
- Proven experience reviewing and assuring OT architectures, technical specifications and engineering deliverables produced by EPCs, OEMs, system integrators and O&M providers.
- Experience defining technical and OT cybersecurity acceptance criteria, documenting deviations and following remediation actions through to closure.
- Ability to troubleshoot complex OT, SCADA, communications and system integration issues and to coordinate root-cause analysis and technical resolution with internal teams and third parties.
- Working knowledge of relevant OT cybersecurity standards and frameworks, including IEC 62443, NIST Cybersecurity Framework and ISO/IEC 27001.
- Experience in renewable energy—particularly solar PV, wind or energy storage—and familiarity with plant controllers, PPCs, RTUs, PLCs, HMIs and data historians would be highly valued.
- Fluent in English
- Strong technical judgement and ability to translate business, engineering and cybersecurity requirements into practical solutions.
- Excellent analytical, troubleshooting and root-cause analysis skills.
- Effective communication and stakeholder management.
- Proactive and continuous improvement mindset.
- Ability to review and challenge technical solutions constructively and provide clear, evidence-based assurance recommendations.