In a nutshell 📌

Position: OT Cybersecurity Specialist
Location: Madrid, Spain | Hybrid

Want to know more? 👇

Insud Pharma operates across the pharmaceutical value chain, combining scientific research, development, manufacturing, sales and commercialization of active pharmaceutical ingredients (APIs), finished dosage forms (FDFs) and branded pharmaceutical products for human and animal health.

With an international presence spanning more than 50 countries, Insud Pharma brings together pharmaceutical expertise, innovation and a commitment to sustainable development.

What are we looking for? 🔎

We are looking for an OT Cybersecurity Specialist to define, coordinate and drive Insud Pharma’s cybersecurity strategy for Operational Technology (OT) and industrial environments.

You will be the cybersecurity reference for our manufacturing sites, working closely with Engineering, Automation, Maintenance, IT, Infrastructure and Cybersecurity teams to protect industrial environments while preserving safety, availability, reliability and manufacturing continuity.

Combining technical expertise, architecture, governance and project coordination, you will coordinate initiatives across multiple sites and countries and further develop a consistent global OT cybersecurity model.

Your challenge! 🚀

Shape our OT cybersecurity strategy and governance

• Define and evolve the global OT cybersecurity strategy, roadmap and security model.
• Establish standards, technical requirements, reference architectures and security baselines across manufacturing sites.
• Improve plant cybersecurity maturity and drive adoption of a consistent global model.
• Define security principles for industrial networks and assets, remote access, identity, monitoring and third-party access.
• Support governance and compliance activities, maintaining alignment with IEC 62443, NIST SP 800-82, ISO/IEC 27001 and applicable NIS2 requirements.

Build secure industrial architectures

• Define and review secure OT and Industrial Control Systems (ICS) architectures.
• Drive IT/OT segregation and industrial network segmentation, including zones, conduits and controlled communication flows.
• Review connectivity between corporate IT, OT, industrial networks and external environments.
• Assess cybersecurity requirements for new architectures, production lines and manufacturing systems.
• Define requirements for firewalls, industrial DMZs, remote connectivity and IT/OT communications.
• Embed cybersecurity principles into industrial projects from the design phase.

Strengthen asset visibility and threat detection

• Ensure visibility and inventory of OT/ICS assets across manufacturing environments.
• Drive the deployment, evolution and effective use of OT network monitoring and threat-detection capabilities.
• Integrate OT telemetry and alerts with the corporate Security Operations Centre (SOC) and incident response processes.
• Develop OT monitoring use cases and cybersecurity KPIs.
• Identify anomalous behaviour, unauthorized communications and threats affecting industrial systems.

Secure remote access and third-party connectivity

• Define and govern the OT secure remote-access model.
• Establish controls for vendors, original equipment manufacturers (OEMs), maintenance providers and other third parties.
• Apply least privilege, strong authentication, traceability and controlled access.
• Review and approve external-provider and industrial-equipment connectivity requirements.

Manage vulnerabilities and cybersecurity risks

• Assess cybersecurity risks across OT environments and industrial systems.
• Evaluate vulnerabilities based on operational impact and exploitability.
• Coordinate remediation and compensating controls with Engineering, Automation, IT and plant stakeholders.
• Establish risk-based approaches where immediate patching or other traditional IT remediation methods cannot be safely applied.
• Monitor legacy technologies and unsupported operating systems.
• Contribute to risk acceptance and exception processes.

Support OT incident response

• Act as the cybersecurity technical reference during incidents affecting industrial environments.
• Coordinate with the SOC, Cybersecurity Operations, IT, Engineering and manufacturing stakeholders.
• Support containment, eradication and recovery decisions, prioritizing plant safety and production availability.
• Develop OT-specific incident response procedures and playbooks.
• Participate in cybersecurity exercises involving industrial environments.

Connect global strategy with plant operations

• Serve as the main cybersecurity point of contact for OT security across manufacturing sites.
• Build effective relationships with Plant Managers, Engineering, Automation, Maintenance and local IT teams.
• Translate cybersecurity risks and requirements into practical operational terms.
• Coordinate global initiatives with local stakeholders and support remediation planning and prioritization.
• Promote collaboration between Cybersecurity, IT and OT/Engineering teams.

Coordinate suppliers and specialized services

• Coordinate OT cybersecurity providers, managed services and external specialists.
• Define technical requirements and expected service levels.
• Participate in the selection and technical assessment of OT cybersecurity solutions.
• Monitor service quality and delivery.

What do you need? 🤓

• At least 3 years of relevant experience in cybersecurity for OT/ICS or industrial environments.
• Technical expertise in OT cybersecurity, secure industrial architectures, network segmentation and IT/OT connectivity.
• Knowledge of asset visibility, security monitoring, secure remote access, third-party security, vulnerability management and OT incident response.
• Familiarity with IEC 62443, NIST SP 800-82, ISO/IEC 27001 and applicable NIS2 requirements.
• An understanding of manufacturing constraints, including safety, availability, legacy technologies and the operational limitations of patching.
• The ability to coordinate projects and stakeholders across manufacturing sites and countries, and communicate technical risks in practical terms.
• Advanced English proficiency and availability to travel internationally.

What’s in it for you? 🎁

• ⏰ Flexible start times from Monday to Friday.
• 📜 Permanent contract.
• 🛡️ Life and accident insurance.
• 🍽️ Meal vouchers through Ticket Restaurant.
• 💻 Access to a training and language-learning platform.
• 🧠 Wellness platform with unlimited free sessions with a psychologist.
• 🚕 Cabify transportation service for employee use.
• 📈 Development plans and an internal mobility policy.
• ⭐ And more!

🔷 Not the right opportunity for you? 🔷

Stay connected! Follow Insud Pharma on LinkedIn and Instagram to discover future opportunities—and share this role with someone who could be a great fit.

#InsudPharma #Challenger #Insuder #InsudTalent #OTCybersecurity #CybersecurityJobs

COMMITMENT TO EQUAL OPPORTUNITIES

At Insud Pharma, we are committed to equal opportunities and gender equality throughout our recruitment processes. We promote an inclusive workplace and do not discriminate on the basis of gender, gender identity, ethnicity, nationality, religion or belief, sexual orientation, age, disability or any other characteristic protected by applicable law.