Information Security Specialist

About the role

The Information Security Specialist ensures compliance with cybersecurity and information‑security standards across Statkraft, aligning with the corporate IT operating model. The role balances strategic business insight with local needs to apply security guidelines effectively and raise security awareness throughout the organization.

Key responsibilities

• Ensure compliance with Cybersecurity and Information Security standards and guidelines across the company.
• Maintain a strategic view of business and local requirements to apply security guidelines effectively.
• Promote Information Security awareness and best practices throughout the organization.

Required profile

• Five (5) years of IT experience with a strong technical foundation in infrastructure, networking, or systems.
• Three (3) years of experience in cybersecurity or information‑security roles, preferably focused on Governance, Risk and Compliance (GRC) or security architecture.
• Mandatory certification in ISO/IEC 27001, ISO/IEC 27005, CISM or CISSP.
• Proven experience implementing and maintaining an ISMS, including policies, controls, risk assessments, and audit support.
• University degree in Engineering, Computer Science, IT, Telecommunications or related field.
• Fluent in Spanish and English, both written and spoken.

Required skills

• Network and systems architecture, TCP/IP, network segmentation, access control.
• Security architecture and ISMS implementation.
• Risk assessment and treatment, including threat, vulnerability and impact analysis.
• Knowledge of NIST and ISA/IEC 62443 frameworks.

What we offer

• Unlimited learning opportunities at various organisational levels.
• Access to a global network of experts, leaders and specialists.
• Work that directly contributes to saving the planet.
• Flexible working solutions that promote work‑life balance.