Get your Emails warmed up and ready to send
Build sender reputation and reach more inboxes with automated email warmup.
Warm up your emails
Starting at $49/month
Tex Tofte
Senior Risk Manager @Ørsted
Signup · Get unlimited contacts
WORK HISTORY
Senior Risk Manager @Ørsted
DK
Risk Identification & AssessmentLead and coordinate cybersecurity risk assessments for OT systems across all types of wind farm assets. Identify vulnerabilities and other weaknesses. Assess any risks that can harm core business processes. Maintain and update the risk register, ensuring it provides a solid risk picture that can be used for prioritization, decisioning and that it always aligns with corporate and regulatory frameworks.OT Cybersecurity Governance & ComplianceEnsure compliance with relevant cybersecurity and critical infrastructure regulations (e.g, ISO 27001, ISO 27019, ISO 27005, CSMA, NERC-CIP, NIS2 & CER Directive, UK NCSC CAF, IEC 62443 series). Develop, maintain and implement an ISMS based on ISO 27001, including OT security policies and rules, ensuring alignment with security frameworks where appropriate. Provide guidance to PM/PO teams to integrate cybersecurity requirements during design, construction, and operation phases of wind farms. Support audits and regulatory inspections, acting as an OT security focal point. Drive Business Impact analysis (BIA) supporting scenario driven Business Continuity Management (BCM) for critical systems. Risk treatment, stakeholder management, reporting and KSI follow-up. Develop and oversee technical and organizational risk treatment actions, e.g: Network segmentation Access control & authentication, Patch & vulnerability management strategies for OT assets, process weaknesses and ensure security by design in critical systems supporting core business services.Stakeholder coordination & communication, deliver regular risk reports and briefings to management, regulators, and other stakeholders, Define and monitor OT cybersecurity KSIs and risk indicators across offshore assets, ensure continuous monitoring & improvement, follow and stay updated on emerging threats, vulnerabilities, and regulations relevant to the offshore wind sector.…and here I ran out of space.
EDUCATION
Copenhagen Business School
MBA, Leadership
Dansk IT
The challenges for tomorrow's CIOs
Fredericia Maskinmesterskole
Bachelor of Technology Management and Marine Engineering, Engineering
International Information Systems Security Certification Consortium
Associate of (ISC)2., IT Security
SKILLS
ABOUT TEX TOFTE
As the energy sector accelerates its digital and operational transformation, Operational Technology (OT) Risk Management has become a strategic imperative - safeguarding critical infrastructure while enabling innovation and operation at scale. With extensive experience across Information Security, OT Cybersecurity, and Risk Management, I help organizations navigate complex risk landscapes with clarity, precision, and purpose.Throughout my career, I have focused on building robust risk governance frameworks, embedding security and resilience into operations, and aligning risk strategies with business objectives. I combine deep technical insight with strategic leadership, enabling companies to make informed, risk-based decisions that protect assets, maintain compliance, and drive sustainable growth.My leadership approach is pragmatic and collaborative: I work closely with engineering, IT, operations, and executive teams to translate risk into actionable strategies and ensure security enhances, rather than hinders, operational excellence. Whether it’s large-scale transformation projects, shaping regulatory compliance programs, or strengthening offshore asset resilience, I aim to make risk management a catalyst for operational reliability and business value.Achievements in Risk Management and Information security management- Developed and implemented cybersecurity and risk governance frameworks aligned with ISO 27001, ISO 27019, ISO 27005, CSMA, NERC-CIP, NIS2 & CER Directive, UK NCSC CAF, IEC 62443, ensuring information security, compliance and improved resilience across multiple jurisdictions and business areas covering enterprise IT, manufacturing, software development, hosting services, cloud services and offshore wind assets- Led large-scale risk assessments covering critical systems, delivering clear, prioritized treatment plans to management- Established cross-functional risk governance processes bridging OT, IT, and business functions, enabling strategic decision-making and effective investment prioritization- Achieving measurable cost efficiencies by focusing risk treatment on high-impact vulnerabilities and weaknesses, ensuring that business prioritization and investments decisions deliver maximum business value.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.