Senior Expert, Cyber Security

<p><span><span>Wärtsilä Energy leads the transition towards a 100% renewable energy future. We help our partners to accelerate their decarbonisation journeys through our market-leading technologies and power system modelling expertise. These cover decarbonisation services, future-fuel enabled balancing power plants, hybrid solutions, energy storage and optimisation technology, including the GEMS Digital Energy Platform.</span></span></p> <p> </p> <p><span><span>Did you know Wärtsilä has delivered 79 GW of power plant capacity and more 125 energy storage installations in 180 countries around the world?</span></span></p> <p> </p> <p><span><span>In this fast changing world of energy, we are constantly on the lookout for future-oriented talent to join our team and to work towards enabling sustainable societies through innovation in technology and services - together. Want to join the ride?</span></span></p> <p><br/>  </p> <p><span><span>We are always on the lookout for a talent with a growth mindset – are you the one?  <br/>   <br/> We are looking for a <b>Senior Expert, Cyber Security</b> with a main responsibility in leading product security domain and related stakeholder collaboration in Engine Power Plants business unit. The preferred location for this position is Vaasa, Turku or Helsinki in Finland. We offer a possibility to hybrid remote work. <br/>   <br/> <b>Your role and responsibilities  </b></span></span></p> <p> </p> <p><span><span>As a Senior Expert, Cyber Security for Engine Power Plant products, your work will include development of product-related cyber security guidelines &amp; processes, leading risk management and stakeholder collaboration. You’ll belong to Power Systems &amp; Controls management team. Power Systems &amp; Controls focuses on technology development and innovation in power plant automation and controls. We develop and maintain plant automation and control solutions for today´s engine power plants, as well as develop future technology solutions for autonomous power plant operations. In addition, we are experts in grid codes and technical power system simulations for Energy business.</span></span></p> <p> </p> <p><span><span><b>Responsibilities for the position: </b></span></span></p> <p> </p> <ul> <li><span><span>Lead cyber security domain on our product development roadmap related to both plant automation &amp; control systems (OT) and cloud infrastructure (IT)</span></span></li> <li><span><span>Further develop cyber security guidelines, control system access policies, compliance related processes for engine power plants </span></span></li> <li><span><span>Proactively introduce product security guidelines and policies that fulfil business-related regulatory cyber security requirements</span></span></li> <li><span><span>Train and educate key stakeholders on cyber security requirements, internal guidelines, processes and access policies</span></span></li> <li><span><span>Oversee product and project related cyber security risks and lead stakeholder collaboration forum for proactive risk mitigation</span></span></li> <li><span><span>Coordinate with Energy Services operations support, external suppliers and certification bodies</span></span></li> <li><span><span>Guide and support technical, sales, and engineering teams in validating project-related cyber security requirements</span></span></li> </ul> <p> </p> <p><span><span><b>To be able to succeed in the position we expect you to have: </b></span></span></p> <p> </p> <ul> <li><span><span>Master’s or bachelor’s degree in computer science, electrical engineering, information technology, or a related field</span></span></li> <li><span><span>In-depth understanding of operational technology related Purdue Enterprise Reference Architecture and product security requirements</span></span></li> <li><span><span>Expertise in IEC62443, NERC CIP, NIS2, SOC2 and EU CRA </span></span></li> <li><span><span>Experience in working with product security, vulnerability handling and cyber security in an industrial company context</span></span></li> <li><span><span>Solid understanding of Cloud Identity and Access Management (IAM), threat modelling, analysis and intelligence for cloud security</span></span></li> <li><span><span>Experience in developing and establishing cyber security guidelines and procedures for a large organization</span></span></li> <li><span><span>Team work mindset</span></span></li> <li><span><span>Excellent presentation skills, as well as written, and verbal communication skills</span></span></li> <li><span><span>Experience in leading change towards key stakeholders in large organisation </span></span></li> <li><span><span>Fluent language skills in English</span></span></li> <li><span><span>Cyber security certifications are beneficial</span></span></li> <li><span><span>Experience in agile methodologies is seen as a plus</span></span></li> </ul> <p> </p> <p><span><span><b>Why you and us?   </b><br/>   <br/> <b>You are valued – as you