Job
In dieser Rolle entwickelst du eine moderne Sicherheitsstrategie, managst Notfall- und Wiederherstellungspläne und integrierst Sicherheitsstandards in alle Teams, während du Risiken analysierst und Sicherheitsbewusstsein förderst.
Job-Technologien
Deine Rolle im Team
- As Information Security Officer you will
- Shape a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks)
- Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systems
- Look beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the owners
- Make ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to management
- Build security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safe
- Define identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvals
- Own detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual work
- Run continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolution
- Assess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for Sales
- Design practical, engaging security training tailored to each function's real risks
- Be a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across Entrix
Unsere Erwartungen an dich
Qualifikationen
- Language Requirement: C1 Level English
- Mandatory Requirements
- An automation first mindset: you solve problems with scripts, tooling and guardrails rather than manual processes
- Track record of building security awareness and culture across technical and non technical teams
- Clear communicator who can explain risk to engineers and management
- Skills to Set You Apart
- A recognised security certification such as CISSP, CISM or ISO 27001 Lead Implementer
- Working proficiency in German
Erfahrung
- 7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech company
- Hands on experience in cloud security (ideally AWS) and identity and access management across SaaS tools
- Hands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implications
- Experience leading incident response
- Security experience in the energy sector or with industrial control systems
- Experience building security in a company with several entities or countries
Unser Angebot
- Location: Munich, Germany
- Employment Type: Full-Time, indefinite term
- Salary Range: € 110.000 - 130.000 per year gross depending on the seniority level
- Working Mode: Office-first
- Competitive Compensation Package: Including salary and benefits
Benefits
Gesundheit, Fitness & Fun
Themen, mit denen du dich im Job beschäftigst
Job-Standorte
Das ist dein Arbeitgeber
Die Entrix GmbH mit Sitz in München ist ein fortschrittliches Unternehmen, das sich auf die Entwicklung und den Betrieb von KI-gestützten Lösungen zur Optimierung von Batteriespeichern und flexiblen Energieanlagen fokussiert. Das Unternehmen begleitet Projekte von der technischen Planung bis hin zum laufenden Betrieb und bietet umfassende 24/7-Services an. Entrix ist in verschiedenen europäischen Märkten tätig und unterstützt Betreiber von Energieanlagen als Dienstleister.
- Startup
- Onsite, Hybrid
- Energiewirtschaft, Umwelt
Weitere Jobs
Diese Jobs könnten dich auch interessieren
Wer hier einsteigt, gestaltet nicht nur Software – er bringt Maschinen zum Laufen, die man auf echten Baustellen wiedererkennt. Software-Entwickler (m/w/d) Basic Engineering Unser Auftraggeber ist ein international führender Hersteller von technisch...
Tätigkeitsbereich Die „DRV Bund IT“ ist der Service-Provider für die Deutsche Rentenversicherung Bund und entwickelt und betreibt in enger Kundenabstimmung eine komplexe IT-Systemlandschaft. Unsere Fachdomäne „IT4IT“ schafft durch die transparente...
Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...
