Information Security Officer (d/f/m)

Job-ID: 2850669Company: Entrix GmbHDepartment: CEO OfficeCategory: Business Positions (Full/Part-Time)Location: MunichEmployment: Permanent employee, Full-timeSeniority: ExperiencedExperience: 7-10 yearsSalary: 110000 - 130000 EUR per yearPosted: 2026-10-20Short FactsLocation: Munich, GermanyEmployment Type: Full-Time, indefinite termSalary Range: 110.000 - 130.000 per year gross depending on the seniority levelWorking Mode: Office-firstLanguage Requirement: C1 Level EnglishYour ResponsibilitiesAs Information Security Officer you willShape a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks)Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systemsLook beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the ownersMake ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to managementBuild security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safeDefine identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvalsOwn detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual workRun continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolutionAssess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for SalesDesign practical, engaging security training tailored to each function’s real risksBe a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across EntrixYour ProfileMandatory Requirements7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech companyHands on experience in cloud security (ideally AWS) and identity and access management across SaaS toolsAn automation first mindset: you solve problems with scripts, tooling and guardrails rather than manual processesHands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implicationsExperience leading incident responseTrack record of building security awareness and culture across technical and non technical teamsClear communicator who can explain risk to engineers and managementSkills to Set You ApartSecurity experience in the energy sector or with industrial control systemsA recognised security certification such as CISSP, CISM or ISO 27001 Lead ImplementerExperience building security in a company with several entities or countriesWorking proficiency in GermanYour BenefitsCompetitive Compensation Package: Including salary and benefitsJobticket accessWellpass accessLunch/Dinner Allowance Vouchers: Allowance for meals on working days as digital meal vouchersWork Equipment: MacBook or Windows Laptop and ergonomic workplaceYour Contact in our People TeamYour contact person is Varsha Singh (Talent Acquisition), if you have questions please reach out directly to talent@entrixenergy.com.

Anzeige melden