Risk Assessment Analyst – OT Cyber & Operational Risk Assessment – 12 months in Kolding/Hybrid

Risk Assessment Analyst – OT Cyber & Operational Risk Assessment – 12 months in Kolding/Hybrid Ansøgningsfrist: 10 Nov, 2026 Placering: Kolding/Hybrid The assignment is; assessment of which operational risk and security risk they have. They have known risk in their risk register, but as an overall risk assessment has never been done before, the number of unknow risk are potentially high, and impact of those therefore unknown. Knowing what risks they have - means they can make informed decision and engineer fit for purpose security solutions. Important profile distinction: This is not primarily an IT/GRC risk role. The candidate must have sufficient OT and industrial understanding to determine how technical weaknesses, failures or compromises translate into operational and business risk. Duties Plan, structure and drive end-to-end OT cyber and operational risk identification and assessments across complex industrial environments, including identification of unknown or undocumented risks. Apply IEC 62443, particularly IEC 62443-3-2, including risk assessment, zones and conduits, threat scenarios and Target Security Levels (SL-T), and translate identified risks into security requirements and treatments. Assess asset/system criticality, threats, vulnerabilities, likelihood, operational consequences, inherent/residual risk and appropriate risk treatments. Demonstrate strong OT/industrial domain knowledge, including SCADA, PLCs, HMIs, engineering workstations, OT networks, remote/vendor connectivity and legacy/EOL technology. Analyse OT architectures and dependencies, including zones, conduits, trust boundaries, critical data flows and dependencies on IT, vendors/OEMs, remote access and external services. Lead structured risk-identification workshops with Technical Authorities, Engineering, Operations, Security and asset/system owners, using strong facilitation skills to uncover undocumented risks and challenge assumptions. Assess risk in its operational and business context, considering availability, safety, production, environment, maintainability and regulatory/compliance impact, rather than technical severity alone. Consolidate individual findings into a consistent portfolio-level OT risk picture, identifying systemic risks, asset-specific risks, dependencies, concentrations and recurring risk themes. Mature OT risk registers and risk-management processes, including consistent risk statements, ratings, ownership, traceability, prioritisation and management-level reporting across organisational boundaries. Translate prioritised risks into risk-treatment requirements and high-level solution scopes, enabling management, Technical Authorities and Engineering to make informed, risk-based decisions and progress subsequent engineering activities. Skills Relevant technical/security education or equivalent senior professional experience. Strong practical OT/ICS security and industrial risk-assessment experience. Demonstrated practical knowledge of IEC 62443 and ISO/IEC 27001-family risk management, particularly IEC 62443-3-2 and ISO/IEC 27005. Experience applying risk-management principles within industrial/OT environments, not solely traditional IT/GRC environments. BSc/MSc in Cyber Security, Automation/Control Engineering, Electrical Engineering, Industrial Engineering, Risk Management or related discipline. IEC 62443 training/certification. ISO/IEC 27001 and/or ISO/IEC 27005 training, certification or recognised risk-management qualification. Experience with ISO/IEC 27019 in the energy/utility sector. ISO describes ISO/IEC 27019:2024 specifically as information-security controls for the energy utility industry. GICSP, CISSP, CISM, CRISC or comparable relevant professional certification. Experience from energy, utilities, renewables or comparable critical infrastructure. Fluent in English. Education - Relevant technical/security education or equivalent senior professional experience. Practical Information - Work setup: Office presence preferable – 2 days per week. Remote work is optional (travel for workshops etc. is expected).   Contact: Aruna Pazuthodi apa@accuro.dk (+45) 8810 5104 Accuro © 2026. All Rights Reserved.

Risk Assessment Analyst – OT Cyber & Operational Risk Assessment – 12 months in Kolding/Hybrid https://accuro.dk/freelance_projects/risk-assessment-analyst-ot-cyber-operational-risk-assessment-12-months-in-kolding-hybrid/ Hej, Jeg faldt over denne opgave, som jeg gerne vil dele med dig., Ansøgningsfrist: 10 Nov, 2026Placering:Kolding/HybridThe assignment is; assessment of which operational risk and security risk they have.They have known risk in their risk register, but as an overall risk assessment has never been done before, the number of unknow risk are potentially high, and impact of those therefore unknown. Knowing what risks they have - means they can make informed decision and engineer fit for purpose security solutions.Important profile distinction: This is not primarily an IT/GRC risk role. The candidate must have sufficient OT and industrial understanding to determine how technical weaknesses, failures or compromises translate into operational and business risk.DutiesPlan, structure and drive end-to-end OT cyber and operational risk identification and assessments across complex industrial environments, including identification of unknown or undocumented risks.Apply IEC 62443, particularly IEC 62443-3-2, including risk assessment, zones and conduits, threat scenarios and Target Security Levels (SL-T), and translate identified risks into security requirements and treatments.Assess asset/system criticality, threats, vulnerabilities, likelihood, operational consequences, inherent/residual risk and appropriate risk treatments.Demonstrate strong OT/industrial domain knowledge, including SCADA, PLCs, HMIs, engineering workstations, OT networks, remote/vendor connectivity and legacy/EOL technology.Analyse OT architectures and dependencies, including zones, conduits, trust boundaries, critical data flows and dependencies on IT, vendors/OEMs, remote access and external services.Lead structured risk-identification workshops with Technical Authorities, Engineering, Operations, Security and asset/system owners, using strong facilitation skills to uncover undocumented risks and challenge assumptions.Assess risk in its operational and business context, considering availability, safety, production, environment, maintainability and regulatory/compliance impact, rather than technical severity alone.Consolidate individual findings into a consistent portfolio-level OT risk picture, identifying systemic risks, asset-specific risks, dependencies, concentrations and recurring risk themes.Mature OT risk registers and risk-management processes, including consistent risk statements, ratings, ownership, traceability, prioritisation and management-level reporting across organisational boundaries.Translate prioritised risks into risk-treatment requirements and high-level solution scopes, enabling management, Technical Authorities and Engineering to make informed, risk-based decisions and progress subsequent engineering activities.SkillsRelevant technical/security education or equivalent senior professional experience.Strong practical OT/ICS security and industrial risk-assessment experience.Demonstrated practical knowledge of IEC 62443 and ISO/IEC 27001-family risk management, particularly IEC 62443-3-2 and ISO/IEC 27005.Experience applying risk-management principles within industrial/OT environments, not solely traditional IT/GRC environments.BSc/MSc in Cyber Security, Automation/Control Engineering, Electrical Engineering, Industrial Engineering, Risk Management or related discipline.IEC 62443 training/certification.ISO/IEC 27001 and/or ISO/IEC 27005 training, certification or recognised risk-management qualification.Experience with ISO/IEC 27019 in the energy/utility sector. ISO describes ISO/IEC 27019:2024 specifically as information-security controls for the energy utility industry.GICSP, CISSP, CISM, CRISC or comparable relevant professional certification.Experience from energy, utilities, renewables or comparable critical infrastructure.Fluent in English.Education- Relevant technical/security education or equivalent senior professional experience.Practical Information- Work setup: Office presence preferable – 2 days per week. Remote work is optional (travel for workshops etc. is expected).  link here: Accuro © . All Rights Reserved.