Lead OT & Information Security Officer

Project overview

Lead OT & Information Security Officer

The Opportunity

If you've spent your career securing operational technology and want to set the standard rather than inherit someone else's, this is worth a look.

Our client runs energy storage plants classed as critical infrastructure. They need one person to own cybersecurity across those sites: the architecture, the day-to-day operations and the formal accountability.

You won't be advising from the sidelines. You'll be the appointed plant CISO, with your name against compliance and audit readiness and real influence over how sites are designed and run.

This is a 3-month contract with potential to extend. You'll be on site 2 days every 2 weeks, which means most of your fortnight is spent away from site.

The Role

You'll combine hands-on technical design with the formal duties of a site-level Information Security Officer. You'll:

That last point matters. You'll shape security on projects before they're built, so the architecture you define becomes the template for what comes next.

The Company

Our client is a major player in renewable energy, with live plants already operating and a pipeline of large projects in development.

Because the sites are critical infrastructure, security isn't a box-ticking exercise here. It sits at the centre of how the plants are built, run and regulated, which gives you the mandate to do the job properly.

• Act as appointed plant CISO, leading compliance and audit readiness under NIS2, KRITIS, IEC 62443 and the IT-Sicherheitskatalog (§11 EnWG)
• Define the standard security architecture every site will follow, including IEC 62443-aligned segmentation, zones and conduits, and secure remote access
• Run security operations for live plants, covering SOC/SIEM monitoring, incident handling and governance
• Strengthen incident management, including BSIG and NIS2-aligned escalation and regulatory reporting
• Carry out plant-level risk assessments and turn the findings into remediation plans
• Oversee cyber risk and compliance for the entities that operate the assets
• Advise on security design for large projects still in development

Requirements

How to Apply

Interested? Get in touch with the MAM Gruppe team for a confidential conversation about this role.

Your CV doesn't need to be up to date. Send what you have, or just give us a call.

• OT/ICS security experience in energy or other critical infrastructure
• Experience as an Information Security Officer or CISO
• Hands-on IEC 62443 experience, particularly zone and conduit design and secure remote access
• Practical experience of NIS2, KRITIS and the IT-Sicherheitskatalog (§11 EnWG), including audit preparation
• A track record of risk assessments and remediation roadmaps
• OT incident response and SOC/SIEM monitoring experience
• Fluent English

Project details

• Start: flexible
• Location: Munich, Bayern, DE