<div><h2><b>Role Purpose</b></h2><p>Lead cybersecurity governance, risk management, and oversight for Iberdrola Germany, ensuring alignment with IEI CISO, Group policies, and German regulatory requirements.</p><h2></h2><h2><b>Key Responsibilities</b></h2><ul><li>Identify, assess, and manage cybersecurity risks across IT, OT, and business processes.</li><li>Apply risk methodologies, consolidate risks with asset owners, and translate findings into clear business language.</li><li>Report risks, vulnerabilities, metrics, and incidents to the Country Manager and IEI CISO.</li><li>Implement the Iberdrola Cybersecurity Model and adapt global policies to the German regulatory context.</li><li>Oversee security‑by‑design, procurement requirements, and cybersecurity in supplier‑managed services.</li><li>Develop and track country cybersecurity plans and mitigation actions.</li><li>Lead regulatory audits (NIS2, KRITIS, IT‑SiG 2.0) and ensure remediation.</li><li>Ensure effective monitoring, threat detection, and vulnerability management.</li><li>Maintain Incident Response Plans, coordinate incident reporting, and run readiness exercises.</li><li>Drive awareness programs and targeted training, promoting a cybersecurity‑first culture.</li><li>Maintain strong engagement with senior leadership and coordinate closely with IEI CISO and business units.</li></ul><h2></h2><h2><b>Knowledge &amp; Skills</b></h2><ul><li>Strong understanding of German cybersecurity regulations (NIS2, KRITIS, IT‑SiG 2.0, GDPR).</li><li>Solid technical knowledge across IT, OT, cloud, and data environments.</li><li>Familiarity with ISO 27001, IEC 62443, NIST CSF.</li><li>Strong executive communication, stakeholder management, and decision‑making under pressure.</li><li>Fluent German required.</li></ul><h2></h2><h2><b>Training &amp; Certifications</b></h2><ul><li>Degree in engineering, computer science, cybersecurity, or similar.</li><li>Preferred: ISO 27001 Lead Auditor/Implementer, CISSP, CISM, CISA, IEC 62443, ISO 31000.</li><li>Commitment to ongoing professional development.</li></ul><h2></h2><h2><b>Experience</b></h2><ul><li>5+ years in cybersecurity or IT/OT risk within critical infrastructure.</li><li>2+ years in cybersecurity or risk leadership.</li><li>Experience with regulators, cybersecurity programs, and incident response.</li></ul><h2></h2><h2><b>What We Offer</b></h2><ul><li>Global leader in green energy: Actively contribute to the energy transition.</li><li>Career development: Diverse training opportunities and long-term growth prospects.</li><li>Language courses: German, English, and Spanish.</li><li>Mobility: Subsidy for the Germany Ticket (BVG).</li><li>Rechargeable benefit card, tax-free</li><li>Employee discounts: Attractive offers from partners in retail, travel, and more.</li><li>Compensation: Performance-based salary that values your contribution.</li></ul></div><p style="text-align:inherit;"></p><p style="text-align:left;"><b>Mobility Information</b></p><p style="text-align:left;">Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.</p><p style="text-align:inherit;"></p><p style="text-align:left;"><b>Job Posting End Date:</b></p>April-30-2026

<p>Avangrid is a leading sustainable energy company transitioning America toward a clean and connected future headquartered in Orange, CT, and has a footprint in 24 states with $40 billion in assets. Our primary businesses are Networks, which serves 3.3 million electric and natural gas customers in the Northeast, and Renewables, the third-largest renewable energy company in the U.S. with a diverse onshore and offshore renewable energy portfolio. With more than 7,000 employees, Avangrid has built a culture that blends diversity, equity and inclusion guided by the company&rsquo;s ESG+F framework and the UN Sustainable Development Goals. This has led to recognition by JUST Capital in 2021 and 2022 as one of America&rsquo;s best corporate citizens and second in utilities for our commitment to the environment and the communities we serve. Avangrid has been named one of the World&rsquo;s Most Ethical Companies for four consecutive years by the Ethisphere Institute.</p>

Country Chief Information Security Officer

<div><h2><b>Role Purpose</b></h2><p>Lead cybersecurity governance, risk management, and oversight for Iberdrola Germany, ensuring alignment with IEI CISO, Group policies, and German regulatory requirements.</p><h2></h2><h2><b>Key Responsibilities</b></h2><ul><li>Identify, assess, and manage cybersecurity risks across IT, OT, and business processes.</li><li>Apply risk methodologies, consolidate risks with asset owners, and translate findings into clear business language.</li><li>Report risks, vulnerabilities, metrics, and incidents to the Country Manager and IEI CISO.</li><li>Implement the Iberdrola Cybersecurity Model and adapt global policies to the German regulatory context.</li><li>Oversee security‑by‑design, procurement requirements, and cybersecurity in supplier‑managed services.</li><li>Develop and track country cybersecurity plans and mitigation actions.</li><li>Lead regulatory audits (NIS2, KRITIS, IT‑SiG 2.0) and ensure remediation.</li><li>Ensure effective monitoring, threat detection, and vulnerability management.</li><li>Maintain Incident Response Plans, coordinate incident reporting, and run readiness exercises.</li><li>Drive awareness programs and targeted training, promoting a cybersecurity‑first culture.</li><li>Maintain strong engagement with senior leadership and coordinate closely with IEI CISO and business units.</li></ul><h2></h2><h2><b>Knowledge &amp; Skills</b></h2><ul><li>Strong understanding of German cybersecurity regulations (NIS2, KRITIS, IT‑SiG 2.0, GDPR).</li><li>Solid technical knowledge across IT, OT, cloud, and data environments.</li><li>Familiarity with ISO 27001, IEC 62443, NIST CSF.</li><li>Strong executive communication, stakeholder management, and decision‑making under pressure.</li><li>Fluent German required.</li></ul><h2></h2><h2><b>Training &amp; Certifications</b></h2><ul><li>Degree in engineering, computer science, cybersecurity, or similar.</li><li>Preferred: ISO 27001 Lead Auditor/Implementer, CISSP, CISM, CISA, IEC 62443, ISO 31000.</li><li>Commitment to ongoing professional development.</li></ul><h2></h2><h2><b>Experience</b></h2><ul><li>5+ years in cybersecurity or IT/OT risk within critical infrastructure.</li><li>2+ years in cybersecurity or risk leadership.</li><li>Experience with regulators, cybersecurity programs, and incident response.</li></ul><h2></h2><h2><b>What We Offer</b></h2><ul><li>Global leader in green energy: Actively contribute to the energy transition.</li><li>Career development: Diverse training opportunities and long-term growth prospects.</li><li>Language courses: German, English, and Spanish.</li><li>Mobility: Subsidy for the Germany Ticket (BVG).</li><li>Rechargeable benefit card, tax-free</li><li>Employee discounts: Attractive offers from partners in retail, travel, and more.</li><li>Compensation: Performance-based salary that values your contribution.</li></ul></div><p></p><p><b>Mobility Information</b></p><p>Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.</p><p></p><p><b>Job Posting End Date:</b></p>April-30-2026

Country Chief Information Security Officer

About the Job

About the Company

Iberdrola

Similar Jobs

Information Security Systems Engineer

Information Security Systems Engineer

Global IT Security Expert - OT

Global IT Security Expert - OT

Director of Information Security & Sovereign Operations (f/m/x)

Director of Information Security & Sovereign Operations (f/m/x)

Senior Manager of Information Security

Senior Manager of Information Security

Information System Security Officer

Information System Security Officer

Senior Officer, Security & Governance

Senior Officer, Security & Governance

Information Security Officer (ISO) Asia-Pacific

Information Security Officer (ISO) Asia-Pacific

Director Information & Cyber Security

Director Information & Cyber Security

Director Information & Cyber Security

Director Information & Cyber Security

Global Manager Information Security & Data Protection (f/m/d)

Global Manager Information Security & Data Protection (f/m/d)