Job
In this role, you will develop a modern security strategy, manage business continuity and recovery plans, and integrate security standards across all teams while analyzing risks and promoting security awareness.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- As Information Security Officer you will
- Form a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks)
- Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systems
- Look beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the owners
- Make ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to management
- Build security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safe
- Define identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvals
- Own detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual work
- Run continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolution
- Assess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for Sales
- Design practical, engaging security training tailored to each function's real risks
- Be a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across Entrix
Our expectations of you
Qualifications
- Language Requirement: C1 Level English
- Mandatory Requirements
- An automation-first mindset: you solve problems with scripts, tooling, and guardrails rather than manual processes
- Track record of building security awareness and culture across technical and non technical teams
- Clear communicator who can explain risk to engineers and management
- Skills to Set You Apart
- A recognized security certification such as CISSP, CISM or ISO 27001 Lead Implementer
- Working proficiency in German
Experience
- 7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech company
- Hands-on experience in cloud security (ideally AWS) and identity and access management across SaaS tools
- Hands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implications
- Experience leading incident response
- Security experience in the energy sector or with industrial control systems
- Experience building security in a company with several entities or countries
What we offer
- Location: Munich, Germany
- Employment Type: Full-Time, indefinite term
- Salary Range: € 110,000 - 130,000 per year gross depending on the seniority level
- Working Mode: Office-first
- Wettbewerbsfähiges Vergütungspaket: einschließlich Gehalt und Leistungen
Benefits
Health, fitness & fun
Topics you will work on
Job locations
About your employer
Entrix GmbH, based in Munich, is an advanced company specializing in the development and operation of AI-driven solutions for optimizing battery storage and flexible energy systems. The company supports projects from technical planning to ongoing operations and offers comprehensive 24/7 services. Entrix operates in several European markets and assists energy system operators as a service provider.
- Startup
- Onsite, Hybrid
- Power Sector, Economy
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...
