Cybersecurity, Telecom & Infrastructure Lead

About the role

Statkraft, a global energy company producing hydropower, wind, solar and gas-fired power, is hiring a Cybersecurity, Telecom & Infrastructure Lead in Santiago. The role covers the secure design, deployment and operation of IT and OT infrastructure (servers, networks, security technologies) for power plants, substations and catchment zones, and supervises a team of Infrastructure Specialists. It works within the global IT and Cybersecurity teams and sits in a 24x7 rotation.

Key responsibilities

• Lead and guide the technical team, foster training and oversee operations
• Shape the cybersecurity function through policies, procedures and contingency plans
• Oversee detection and response to security incidents, investigate events and coordinate corrective actions
• Promote information security awareness and ensure compliance with cybersecurity policies, laws and regulations
• Design, implement and support cybersecurity solutions aligned with corporate standards, working with the global CSIRT
• Take part in risk assessments and audits, and act as a consultant to the business on security matters
• Manage and maintain servers, environments, deployments and uptime, keeping SLAs and KPIs in line
• Ensure continuity of critical services (network, servers, virtualization, VPN, firewall, Wi-Fi) and lead technical projects as Project Manager
• Maintain technical documentation, prepare service performance reports and stay up to date on threats and technologies

Required profile

• One year of experience leading technical teams
• Three years of proven cybersecurity and information security experience
• Three years designing, implementing and operating IT infrastructure (Windows, Unix, databases, networking), preferably in global organizations
• Experience in information security awareness programs, supplier technical supervision, incident/change/problem management
• University degree in Engineering, fluent written and spoken English

Required skills

• Certification: CEH, eJPT, SSCP, CPENT or Security+
• Security devices: NGFW, VPN, IPSec, SD-WAN, proxy, LDAP, IDS/IPS, SIEM, EDR
• SOAR, threat hunting, NAC, Zero Trust, security patch management
• OT environments, TCP/IP networking, AD, DNS, Windows Server, VMware
• Desirable: cloud security in Azure, ICS, OWASP, ITIL, NIST, ISO/IEC27001