Wind Farm Security Officer (all genders)

Offshore wind energy - the pillar of our future energy supply!
Skyborn Renewables is a pioneer and leading offshore wind developer and operator with more than 20 years’ experience and a track record of approx. 7 GW developed around the globe to date. The competencies of our 400 employees cover the entire offshore wind value chain, including greenfield development, engineering and design, procurement, financing, construction management and asset management.
Do you want to make a difference? To advance the energy transition in an international and growing business field? Skyborn Renewables offers you the opportunity to do so.
With us, you can expect a dynamic environment with committed employees as well as the opportunity to break new ground and expand your skills.
Become a part of our friendly team at our location in Bremen or Hamburg as a

Wind Farm Security Officer (all genders) (Part time position 20h)

Your future tasks:

• Lead and continuously enhance information and cybersecurity for offshore wind assets, ensuring compliance with NIS2, KRITIS, and internal cybersecurity frameworks.
• Establish, implement, operate, and maintain the Information Security Management System (ISMS) for offshore wind operations, with a strong focus on Operational Technology (OT) and SCADA environments.
• Develop, implement, and enforce cybersecurity controls for OT infrastructure, including wind turbines, SCADA systems, industrial control systems (ICS), communication networks, and remote connectivity solutions.
• Conduct and coordinate cybersecurity risk assessments for offshore wind assets, covering IT, OT, vendor access, third-party connectivity, and operational risks.
• Serve as the primary cybersecurity authority for offshore operations, acting as the key interface between central Information Security, Security Operations Center (SOC), service managers, business stakeholders, and external regulatory authorities.
• Ensure compliance with applicable regulatory, contractual, and operational cybersecurity requirements across offshore wind assets and supporting infrastructure.
• Coordinate and oversee internal and external cybersecurity audits, vulnerability assessments, penetration tests, and compliance reviews.
• Govern cybersecurity requirements for external partners, including OEMs, operations and maintenance providers, contractors, and service vendors.
• Promote cybersecurity awareness, security-by-design principles, and a strong operational security culture across offshore asset and project teams.
• Monitor cybersecurity activities across offshore wind farms, including OT, SCADA, industrial control systems, and supporting IT environments.
• Perform cybersecurity risk and vulnerability assessments and coordinate the implementation of mitigation and remediation measures.
• Support the detection, investigation, escalation, and response to cybersecurity incidents in collaboration with the Security Operations Center (SOC), central IT, and external stakeholders.
• Ensure secure remote access, vendor connectivity, privileged access, and secure integration of connected operational systems.
• Maintain cybersecurity governance, documentation, reporting, policies, procedures, and audit evidence to ensure continuous compliance and operational readiness.
• Plan and deliver cybersecurity awareness programs, training sessions, tabletop exercises, and incident response simulations to strengthen organizational resilience.
• Drive continuous improvement of OT cybersecurity capabilities through standardization, automation, risk reduction, and adoption of industry best practices.

Your profile

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field.
• 5-10 years of professional experience in Operational Technology (OT) Security, Critical Infrastructure Protection, Information Security Management, or Industrial Cybersecurity within offshore wind, renewable energy, utilities, or industrial environments.
• Strong knowledge of OT/ICS/SCADA security principles, industrial communication protocols, and critical infrastructure protection.
• Experience implementing and maintaining Information Security Management Systems (ISMS) and cybersecurity governance frameworks.
• Solid understanding of NIS2, KRITIS, IEC 62443, ISO/IEC 27001, and other relevant cybersecurity and critical infrastructure standards.
• Experience managing cybersecurity risks, audits, penetration testing, vulnerability management, and regulatory compliance.
• Knowledge of incident response, threat management, and collaboration with Security Operations Centers (SOC).
• Strong analytical, risk assessment, and problem-solving skills with a structured and solution-oriented approach.
• Excellent communication, stakeholder management, and vendor coordination skills.
• Fluent in English and German, both written and spoken.

The position is offered as part-time job (20h).
Our benefits:

• Permanent employment in an international company that is continuously expanding
• Mobile office regulation of 40% per week
• 30 days of vacation, extended with possible unpaid vacation days, afternoon off on your own birthday
• Open doors and room for your own ideas in a friendly, modern working environment
• Further education and training opportunities
• Company bicycle leasing (business bike) and company fitness (EGYM Wellpass)
• Central office location with direct access to public transportation
• Extraordinary company celebrations, team events and sporting events
• Other employee benefits: capital-forming benefits, subsidized company pension plan, bonus for employees who recruit employees

We look forward to receiving your application!