Information Security Specialist

About the role

Statkraft is looking for an Information Security Specialist to ensure compliance with cybersecurity and information‑security standards across the organisation. You will work within the corporate IT operating model, aligning security guidelines with business needs and promoting a strong security culture.

Key responsibilities

• Maintain and improve the Information Security Management System (ISMS) in line with ISO/IEC 27001 and related standards.
• Conduct risk assessments, identify threats and vulnerabilities, and define treatment measures.
• Support internal and external audits, track corrective actions, and drive continuous improvement.
• Develop and enforce security policies, controls, and access‑control mechanisms.
• Raise security awareness throughout the company and act as a point of contact for security queries.

Required profile

• Minimum 5 years of IT experience with a solid foundation in infrastructure, networking or systems.
• At least 3 years in cybersecurity or information‑security roles, preferably focused on GRC or security architecture.
• Relevant certifications such as ISO/IEC 27001, ISO/IEC 27005, CISM or CISSP.
• Fluent in English and Spanish, both written and spoken.
• University degree in Engineering, Computer Science, IT, Telecommunications or a related field.

Required skills

• Network and systems architecture, TCP/IP, network segmentation, access control.
• Security architecture and risk‑assessment methodologies.
• Implementation and maintenance of ISMS, security policies and controls.
• Knowledge of NIST and ISA/IEC 62443 frameworks (OT/ICS knowledge is a plus).

What we offer

• Unlimited learning opportunities across a global network of experts.
• Career growth in a company dedicated to renewable energy and climate impact.
• Flexible working solutions promoting work‑life balance.