Security, Cyber & Resilience Manager

Important! To make sure your application is considered, please submit it before the end of the day on (dd.mm.yyyy): 19.11.2026 We encourage candidates to apply as soon as possible.

What does the job involve?

The Security, Cyber & Resilience Manager will lead and coordinate security, cybersecurity and resilience activities for Equinor’s offshore wind business in Poland. The role will protect offshore and onshore energy assets, people, information, technology, operations and critical services, with particular focus on national critical infrastructure and the transition from projects into operations. The role is the Poland focal point for integrated security risk management, cyber-physical security, critical infrastructure protection and regulatory readiness. It translates applicable Polish, EU and corporate requirements into practical, risk-based governance, controls, assurance and improvement activities across projects and operations. Working closely with operations, projects, enterprise cybersecurity, IT, OT, legal, emergency preparedness, public affairs, procurement, partners and management, the role will strengthen secure, resilient and compliant offshore wind operations and support effective decision-making in an evolving threat and regulatory environment.

What will my tasks be?

Within this position, your key tasks will be to:

Security and critical infrastructure

• Lead the identification, assessment and treatment of security risks affecting offshore wind farms, onshore facilities, personnel, contractors, suppliers, critical services and business continuity.

• Own and coordinate critical infrastructure protection and resilience planning, including required security documentation, protective measures, exercises, assurance, reporting and improvement follow-up.

• Manage physical and technical security programmes, including access control, guarding, surveillance, intrusion detection, security procedures, awareness and training.

• Coordinate the secure handling of classified and sensitive security information, including need-to-know arrangements and applicable screening, vetting and access requirements.

Cyber and cyber-physical resilience

• Act as the Poland business focal point for cybersecurity and cyber-physical resilience, working with enterprise cybersecurity, IT and OT specialists to ensure clear ownership and effective implementation.

• Coordinate cyber risk assessments and security requirements for IT, OT/ICS, communications, digital services and connected operational systems across the asset lifecycle.

• Ensure that cybersecurity, incident response, recovery, supply-chain security and assurance requirements are integrated into projects, contracts, operational procedures and management reporting.

• Support coordinated response to cyber and hybrid incidents, including escalation, crisis interfaces, lessons learned and corrective actions.

Regulatory compliance and assurance

• Coordinate security and resilience compliance in Poland, including applicable requirements concerning national critical infrastructure, the Polish National Cybersecurity System, NIS2, CER and related implementing legislation and guidance.

• Monitor emerging Polish and EU requirements and authority expectations, assess business impact, and translate them into actionable governance, controls, plans and evidence.

• Maintain an integrated obligations register covering relevant legal, regulatory, licence, permit and corporate requirements, with clear ownership, implementation status and evidence of compliance.

• Drive assurance programmes, compliance assessments, audit readiness, management reviews and closure of identified gaps across projects and operational assets.

Preparedness, continuity and incident management

• Strengthen emergency preparedness, security incident management, crisis interfaces and business continuity through plans, exercises, testing, lessons learned and corrective actions.

• Promote an all-hazards resilience approach covering physical, cyber, personnel, supply-chain, maritime, geopolitical and operational disruption scenarios.

• Ensure that security and resilience dependencies, recovery priorities and continuity requirements are understood by relevant asset and support teams.

Stakeholder engagement and leadership support

• Serve as the primary Poland security interface towards relevant authorities and external stakeholders, coordinated with management and corporate security functions.

• Monitor threat information and geopolitical developments, assess potential implications for offshore wind activities and provide concise recommendations to management and operational stakeholders.

• Provide senior management and boards with integrated security, cyber and resilience reporting, risk assessments, regulatory updates, assurance status and recommended risk-treatment decisions.

• Build a strong security and resilience culture across employees, contractors, partners and suppliers.

Here's what we expect from you

At Equinor, there are some overall qualities we regard as essential. We want you to identify with the values that guide our decisions and help us succeed and grow: open, collaborative, courageous and caring. We expect you to make safety your priority and to contribute to our zero-harm culture. And for this specific position, we are also looking for:

Required

• University degree in security, cybersecurity, risk management, engineering, law, public administration or a related discipline.

• 10+ years of relevant experience across security, cybersecurity, resilience, critical infrastructure, risk management or regulatory compliance.

• Experience from energy, utilities, offshore, maritime, defence, transportation or another critical-infrastructure sector.

• Strong understanding of Polish critical-infrastructure protection and relevant EU security, resilience and cybersecurity frameworks.

• Working knowledge of NIS2, the Polish National Cybersecurity System, CER and related governance, assurance and compliance expectations.

• Practical understanding of cyber risk and the interfaces between enterprise IT, OT/ICS and physical security. The role need not be the technical system owner, but must be able to challenge, coordinate and assure specialist delivery.

• Experience engaging with regulators, public authorities, emergency services or security agencies, and managing audits, assurance or compliance programs.

• Strong judgement, stakeholder management, communication and influencing skills.

• Fluency in Polish and English language is required.

Preferred

• Experience in offshore wind, offshore operations, oil and gas or large-scale energy infrastructure.

• Knowledge of OT/ICS security, cyber-physical risk and security-by-design across major projects and operational assets.

• Experience with crisis management, emergency preparedness, incident response and business continuity.

• Experience working with classified or sensitive security information; existing clearance is an advantage where relevant.

What can we offer you?

We want you to have a rewarding and fulfilling work life. That’s why we offer:

Not just a job - a career

In Equinor, your development begins on day one. You will build your competence through a wide range of learning activities while being empowered to build your career across multiple disciplines and geographies. Our internal job market allows a wide range of opportunities for development and growth within your own field, or even in other areas you find interesting and relevant.

Attractive rewards

We give you a comprehensive benefits package with a competitive salary, global parental leave, bonus scheme and pension plan.

Wellness and work-life balance

We care about and prioritise our employees’ well-being. We know that for you to be the best version of yourself in the workplace, being able to collect your children, attend a class or simply enjoy social time can be invaluable. That’s why w