- Location: Munich, Germany
- Employment Type: Full-Time, indefinite term
- Salary Range: € 110.000 - 130.000 per year gross depending on the seniority level
- Working Mode: Office-first
- Language Requirement: C1 Level English
Information Security Officer (d/f/m)
Munich
Full-time
Permanent employee
110,000 - 130,000 € per year
Short Facts
Your Responsibilities
As Information Security Officer you will
- Shape a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks)
- Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systems
- Look beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the owners
- Make ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to management
- Build security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safe
- Define identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvals
- Own detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual work
- Run continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolution
- Assess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for Sales
- Design practical, engaging security training tailored to each function’s real risks
- Be a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across Entrix
Your Profile
Mandatory Requirements
Skills to Set You Apart
- 7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech company
- Hands on experience in cloud security (ideally AWS) and identity and access management across SaaS tools
- An automation first mindset: you solve problems with scripts, tooling and guardrails rather than manual processes
- Hands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implications
- Experience leading incident response
- Track record of building security awareness and culture across technical and non technical teams
- Clear communicator who can explain risk to engineers and management
Skills to Set You Apart
- Security experience in the energy sector or with industrial control systems
- A recognised security certification such as CISSP, CISM or ISO 27001 Lead Implementer
- Experience building security in a company with several entities or countries
- Working proficiency in German
Your Benefits
- Competitive Compensation Package: Including salary and benefits
- Jobticket access
- Wellpass access
- Lunch/Dinner Allowance Vouchers: Allowance for meals on working days as digital meal vouchers
- Work Equipment: MacBook or Windows Laptop and ergonomic workplace
Your Contact in our People Team
Your contact person is Varsha Singh (Talent Acquisition), if you have questions please reach out directly to talent@entrixenergy.com.
About us
We are an energy trader and market leader for trading flexible energy systems in Europe.
Entrix is active in Germany, Poland, Italy, Spain, and Portugal, with offices in Munich, Warsaw, Milan, and Madrid. Since 2022, Entrix has been pioneering battery optimization in Germany by managing one of the country’s first large-scale storage projects – and is now the trusted partner of leading infrastructure players such as Encavis, MEAG (Munich Re), as well as a wide range of local utilities.