OT Security & Governance

The OT Security & Governance role establishes and maintains OT governance across Greenvolt, defining standards, controls and decision frameworks and overseeing third-party compliance throughout the asset lifecycle.

The main responsibilities are:

• Own, maintain and continuously improve Greenvolt’s OT governance and lifecycle model, including asset tiering, policies, procedures, standards for Solar PV, Biomass, Wind and BESS, control requirements, decision rights and accountabilities.
• Define OT cybersecurity requirements and compliance frameworks aligned with NIS2, IEC 62443, ISO 27001 and applicable data-protection obligations, translating them into practical requirements for projects and operating assets.
• Coordinate OT risk assessments and risk analysis, review and challenge remediation plans, support internal and external audits, and monitor compliance and residual-risk status through closure.
• Define cybersecurity and governance requirements for EPCs, OEMs, integrators and O&M providers; challenge supplier deliverables and evidence; and govern contractor and third-party access models.
• Govern exceptions and deviations from OT standards, ensuring each is documented, risk-assessed, formally approved, time-bound, supported by compensating controls and tracked to closure.
• Establish OT governance and compliance reporting, metrics and management information; communicate trends, material risks, non-compliance and improvement priorities to governance forums and decision-makers.
• Act as Greenvolt’s senior functional authority for OT cybersecurity and risk, coordinating stakeholders across countries, providing guidance and training, and promoting consistent adoption and continual improvement of governance practices.