OT Cyber and Compliance Manager

General – Internal

The position

As the global renewable energy sector scales at pace, the systems connecting our wind, solar, and battery assets — SCADA platforms, remote monitoring environments, and OT networks — are increasingly targeted by sophisticated threat actors. The emergence of AI-enabled attack toolkits has lowered the barrier to large-scale OT intrusions, while a rapidly tightening regulatory landscape across the UK, Europe, the US, and Australia is placing new and binding compliance obligations on operators of energy infrastructure.

To address this challenge, we are creating a new role of OT Cyber & Compliance Manager within the OT & SCADA function. This is a high-impact role combining governance, technical delivery, and commercial development. The post-holder will be the owner of OT cyber security across our managed portfolio — building the compliance programmes, the technical controls, and ultimately the client-facing service capability that positions the business as a trusted partner on cyber resilience in renewables.

This role will ultimately ensure that:

• Our OT infrastructure and managed sites meet all applicable regulatory requirements across every jurisdiction in which we operate

• Clients receive confident, accurate responses to cyber and compliance questions during procurement and throughout contract delivery

• The Jupiter OT tenant and site-level OT networks are architected, hardened, and continuously maintained to industry-leading standards

• A new, revenue-generating OT cyber compliance service offering is built, launched, and led from within the OT team

• Patching, vulnerability management, and penetration testing happen systematically, with clear ownership and evidence trails

The post-holder will work in close partnership with the Head of OT Architecture, regional OT managers, and the Group Cyber team. The role requires occasional site visits to wind, solar, and battery assets across the portfolio.

Key Accountabilities

OT Cyber Governance & Compliance

• Design, build, and own a global OT cyber compliance programme covering NIS2 (Europe), the UK Cyber Resilience Act, NERC CIP Low-Impact (US), and the Security of Critical Infrastructure Act (SOCI, Australia)

• Ensure local compliance managers and regional teams have the systems, policies, procedures, and evidence repositories in place to meet their respective local regulatory requirements

• Maintain the OT risk register, track remediation actions, and provide OT input into the enterprise cyber risk framework

• Own audit readiness across all regulatory programmes; lead self-certification processes and support external audits with structured, credible evidence

• Liaise with the Group Cyber function to ensure consistency between IT and OT compliance approaches

Client Engagement & Business Development

• Lead the OT cyber response to client RfP processes and vendor risk assessments, providing technically authoritative and commercially compelling answers to cyber and compliance questionnaires

• Build the internal business case for, and lead early client engagements in, a new OT cyber compliance services offering for assets owners

• Work with Business Development leads to define contractual language around OT cyber obligations, clarifying what we do and do not offer in client agreements

• Shape and articulate our OT cyber services proposition to clients, positioning the organisation as a market leader in OT security for renewables

Technical OT Security

• Configure, maintain, and continuously evolve the Jupiter OT tenant in Azure, including security architecture, firewall rules, VPN/IPSEC configurations, and vendor remote access controls

• Establish and own systematic programmes for OT patching, vulnerability scanning, and penetration testing across managed assets and centralised infrastructure

• Lead OT incident response and recovery activities in relation to cyber events, working closely with Group Cyber colleagues

• Develop and implement OT-specific cyber security standards, hardening baselines, and monitoring controls aligned to recognised frameworks (NIST CSF, IEC 62443, ISA/IEC)

• Maintain an OT asset inventory and manage vulnerability risk across the portfolio

OT Network & Architecture

• Conduct site visits to wind, solar, and battery power plants to assess the current state of OT network equipment and infrastructure

• Lead OT network deployment activities at sites, ensuring security-by-design is embedded from the outset

• Support the Head of OT Architecture on OT network design standards, patterns, and architecture roadmaps, acting as the security authority on architecture decisions

• Work with regional teams to standardise OT network configurations globally, reducing complexity and improving cyber posture across the fleet