Operational Technology

Operational Technology (OT) Cybersecurity Specialist – based in Luxembourg. This position is based at our Luxembourg headquarters and requires regular office presence. The EIB offers you the opportunity to live and work in a truly international and multi-cultural environment. We also offer relocation support. The EIB, the European Union's bank, is seeking to recruit for its Chief Financial Controller Directorate (CFC), Corporate Real Estate Department (CRE), Asset and Property Management Division (APM), Building Technology Unit (BT) at its headquarters in Luxembourg, an Operational Technology (OT) Cybersecurity Specialist*. This is a full-time position at grade 5 for which the EIB offers a permanent contract.
• internal benchmark Officer Non-financial Risk Management Panel interviews are foreseen as of December 2026/January 2027. Purpose As an OT Cybersecurity Specialist, you will play a critical role in safeguarding the Bank’s building systems, operational technology environments, including building technical infrastructure systems. Your mission will be to define, implement and continuously improve OT, IoT, cyber-physical cybersecurity controls for building technology infrastructure and systems against evolving cyber threats, including improving asset visibility, managing cyber risk, addressing threats and vulnerabilities and supporting the resilient operation of the EIB Group’s Corporate Real Estate assets and services. Operating Network Reporting to the Head of Building Technology Unit, you will join the team responsible for designing, building, expanding and supporting building systems and their related infrastructure. The role operates at the intersection of Building Technology, facilities, physical security, information technology and information security. It focuses on cyber-physical systems in the built environment rather than on a conventional manufacturing or process-production setting. Accountabilities
• Define and implement the OT, IoT, Cyber-Physical cybersecurity strategy with external providers, aligned with the EIB Group’s security framework and with requirements and standards applicable to technologies in the built environment.
• Assess and report the cybersecurity posture of OT, IoT, cyber-physical systems, providing management with timely, actionable information on risk exposure and mitigation progress.
• Maintain a comprehensive inventory and documentation baseline for OT, IoT, cyber-physical assets, including building systems and building technology devices to support visibility and traceability.
• Develop and improve OT, IoT, Cyber-Physical cybersecurity procedures, including incident-response protocols and governance arrangements for internal and third-party environments.
• Support and supervise secure configuration and hardening of OT, IoT, cyber-physical infrastructure, including protocol-level improvements, network segmentation and zero-trust access models.
• Conduct cybersecurity assessments and gap analyses against relevant OT, IoT, cyber-physical standards and requirements, and support or supervise the implementation of mitigation measures.
• Evaluate smart building automation technologies and architectures against cybersecurity, secure-communications, operational and regulatory requirements.
• Support risk alignment across IT, OT, IoT, cyber-physical convergence zones by coordinating with relevant internal stakeholders and regulators within the role’s established authority.
• Manage identity and access management for OT, IoT, cyber-physical systems, including privileged-access monitoring and periodic recertification in accordance with the EIB Group’s relevant IT policy for the OT, IoT, cyber-physical environment.
• Coordinate day-to-day OT, IoT, cyber-physical cybersecurity operations, including change and incident management, supplier-activity reviews, and the initiation and tracking of security-improvement projects.
• Define, coordinate and monitor OT, IoT, cyber-physical project plans, supporting stakeholder alignment, timely delivery and continuous improvement of cyber-resilience capabilities.
• Support the deployment, integration and lifecycle maintenance of OT/IoT infrastructure and smart-building systems, with attention to secure connectivity, protocol compatibility and operational continuity. Qualifications
• University degree (minimum an equivalent to a Bachelor**) preferably in a science, technology, engineering or mathematics discipline such as Computer Science, Engineering, Mathematics, Physics or in related field.
• Minimum 5 years of relevant professional experience in cybersecurity and networks.
• Experience developing OT or IoT or Cyber-Physical cybersecurity strategies and designing architectures, including functional and technical requirements, in collaboration with IT teams.
• Hands-on experience with OT or IoT or Cyber-Physical infrastructure, including servers, virtualisation, backup and high-availability systems, and patch and firmware management for OT or IoT or Cyber-Physical and Microsoft operating-system devices.
• Proven experience in OT or IoT or Cyber-Physical network cybersecurity and networking technologies or connectivity protocols.
• Proven ability to draft and maintain OT or IoT or Cyber-Physical policies, procedures, network diagrams and related technical documentation.
• Substantial cybersecurity experience in structured or regulated environments.
• Experience applying relevant standards and requirements such as ISA/IEC 62443 or NIS2 or DORA or ISO/IEC 27002.
• Proficiency in Microsoft Office (Office 365/MS Teams/MS SharePoint).
• Experience in securing smart building, building automation, safety or physical security systems with dedicated or specific OT or IoT or Cyber-Physical inventory tools, EDRs, building systems protocols (BACnet, RTSP, OSDP, OPC, KNX, MQTT) would be a distinct advantage.
• Excellent knowledge of English and/or French, with a good command of the other***. Knowledge of other European Union languages would be an advantage. Competencies Find out more about EIB core competencies here To find out more about our eligibility criteria click here (**) non-EU diplomas must be formally recognised by a competent national authority of any EU Member State. (***) Unless stated explicitly as a required qualification, a good command of French is not a pre-requisite for hire. As both English and French are however official working languages of the EIB, proficiency in both languages is a pre-requisite for your future career development. Any language clause in your contract must be fulfilled in order for you to be eligible for a promotion (either via the annual appraisal cycle or via an internal selection process). Proficiency is understood to mean the attainment of level 5 of the Inter Institutional language courses, corresponding to B1.2 of the Common European Framework of Reference for Languages (CEFRL). The Bank offers appropriate training support. We hire and value talent with unique characteristics, creating a work environment where they can be themselves. We believe that Diversity, Equity and Inclusion makes us a performing and innovative organisation. We encourage all suitably qualified and eligible candidates to apply regardless of their gender identity/expression, age, racial, ethnic and cultural background, religion and beliefs, sexual orientation, disability or neurodiversity. We strongly invite applicants with a disability, neurodivergent profile or chronic condition to request reasonable accommodations at any stage during the recruitment process. Please contact the EIB Recruitment team Jobs@eib.org who will ensure that your request is handled. By applying for this position, you acknowledge the importance of maintaining the security and integrity of the Information of the EIB Group. In case of selection for the position, you agree to comply with all measures (policies, controls, document classification and management) implemented by the EIB Group to prevent unauthorised disclosure of any information or any damage to the EIB Group reputation. This is an open campaign to consecutively fill open positions. The campaign will remain open until position is filled. Applications will be reviewed in order of receipt.