EXPLORE YOUR NEXT CHAPTER
Information Security Officer (d/f/m)
Entrix
Source: Headcount Labs · original listing ↗
Job data: Headcount Labs, ODbL 1.0. Job descriptions belong to their employers.
Posted Oct 20
About this role
Short Facts • Location: Munich, Germany • Employment Type: Full-Time, indefinite term • Salary Range: € 110.000 - 130.000 per year gross depending on the seniority level • Working Mode: Office-first • Language Requirement: C1 Level English Your Responsibilities As Information Security Officer you will • Shape a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks) • Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systems • Look beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the owners • Make ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to management • Build security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safe • Define identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvals • Own detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual work • Run continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolution • Assess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for Sales • Design practical, engaging security training tailored to each function’s real risks • Be a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across Entrix Your Profile Mandatory Requirements • 7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech company • Hands on experience in cloud security (ideally AWS) and identity and access management across SaaS tools • An automation first mindset: you solve problems with scripts, tooling and guardrails rather than manual processes • Hands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implications • Experience leading incident response • Track record of building security awareness and culture across technical and non technical teams • Clear communicator who can explain risk to engineers and management Skills to Set You Apart • Security experience in the energy sector or with industrial control systems • A recognised security certification such as CISSP, CISM or ISO 27001 Lead Implementer • Experience building security in a company with several entities or countries • Working proficiency in German Your Benefits • Competitive Compensation Package: Including salary, benefits and virtual share options • Professional Development: Annual development budget of 3,000 € for coachings, trainings, books, etc. • Health & Sport Subsidy: Company subsidised sports facilities membership • Public Transportation Subsidy: Monthly subsidy to your public transport ticket • Lunch/Dinner Allowance Vouchers: Allowance for meals on working days as digital meal vouchers • Work Equipment: MacBook or Windows Laptop and ergonomic workplace • Regular Team Events: Knowledge Sessions, Afterwork, Sports, Offsites etc. Your Contact in our People Team Your contact person is Varsha Singh (Talent Acquisition), if you have questions please reach out directly to talent@entrixenergy.com .