Job
- Level
- Senior
- Location
- Munich
- Working Model
- Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Salary
- 110.000 to 130.000€ gross/year
Job Summary
In this role, you will develop a modern security strategy, manage business continuity and recovery plans, and integrate security standards across all teams while analyzing risks and promoting security awareness.
Job Technologies
Your role in the team
- As Information Security Officer you will
- Form a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks)
- Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systems
- Look beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the owners
- Make ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to management
- Build security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safe
- Define identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvals
- Own detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual work
- Run continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolution
- Assess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for Sales
- Design practical, engaging security training tailored to each function's real risks
- Be a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across Entrix
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Language Requirement: C1 Level English
- Mandatory Requirements
- An automation-first mindset: you solve problems with scripts, tooling, and guardrails rather than manual processes
- Track record of building security awareness and culture across technical and non technical teams
- Clear communicator who can explain risk to engineers and management
- Skills to Set You Apart
- A recognized security certification such as CISSP, CISM or ISO 27001 Lead Implementer
- Working proficiency in German
Experience
- 7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech company
- Hands-on experience in cloud security (ideally AWS) and identity and access management across SaaS tools
- Hands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implications
- Experience leading incident response
- Security experience in the energy sector or with industrial control systems
- Experience building security in a company with several entities or countries
This text has been machine translated. Show original
What we offer
- Location: Munich, Germany
- Employment Type: Full-Time, indefinite term
- Salary Range: € 110,000 - 130,000 per year gross depending on the seniority level
- Working Mode: Office-first
- Wettbewerbsfähiges Vergütungspaket: einschließlich Gehalt und Leistungen
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Topics You Will Work On
Job Locations
About Your Employer
Entrix GmbH
Entrix GmbH, based in Munich, is an advanced company specializing in the development and operation of AI-driven solutions for optimizing battery storage and flexible energy systems. The company supports projects from technical planning to ongoing operations and offers comprehensive 24/7 services. Entrix operates in several European markets and assists energy system operators as a service provider.
Description
- Company Type
- Startup
- Working Model
- Onsite
- Industry
- Power Sector, Economy