Senior Risk Analyst

We are looking for an experienced Senior OT Risk Assessment Analyst to lead cyber and operational risk assessments across complex industrial and operational technology (OT) environments. This role will focus on identifying, assessing, and managing risks that could impact safety, production, availability, environmental operations, and overall business continuity. The successful candidate will have a strong background in OT/ICS cybersecurity and hands-on experience conducting end-to-end risk assessments within industrial environments. You will work closely with engineering, operations, and security stakeholders to identify threats, assess vulnerabilities, facilitate risk workshops, and develop practical risk treatment recommendations. Key Responsibilities

• Lead OT cyber and operational risk assessments across industrial environments.
• Apply IEC 62443 methodologies, particularly IEC 62443-3-2.
• Assess risks related to SCADA systems, PLCs, HMIs, engineering workstations, OT networks, and remote/vendor access.
• Facilitate risk workshops with technical and operational stakeholders.
• Analyse OT architectures, critical dependencies, and system vulnerabilities.
• Develop and improve OT risk registers and management reporting.
• Translate identified risks into actionable remediation and engineering requirements.

Requirements

• Proven experience leading OT/ICS cybersecurity risk assessments.
• Strong knowledge of IEC 62443 and OT risk management frameworks.
• Experience with SCADA, PLC, HMI, industrial networks, and operational technology environments.
• Ability to communicate technical risks and business impacts to both technical and non-technical stakeholders.
• Fluent English communication skills.

Preferred Experience

• Energy, utilities, renewables, or other critical infrastructure sectors.
• IEC 62443, CISSP, CISM, CRISC, GICSP, or related certifications.
• ISO 27001 / ISO 27005 knowledge and experience.

Location: Kolding, Denmark (Hybrid) Contract: November 2026 – November 2027 Working Pattern: Approximately 2 days onsite per week, with occasional travel for workshops