Information Security Officer (d/f/m)

Short Facts
Location: Munich, Germany
Employment Type: Full-Time, indefinite term
Salary Range: € 110.000 - 130.000 per year gross depending on the seniority level
Working Mode: Office-first
Language Requirement: C1 Level English
Your Responsibilities
As Information Security Officer you will Shape a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks)
Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systems
Look beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the owners
Make ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to management
Build security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safe
Define identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvals
Own detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual work
Run continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolution
Assess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for Sales
Design practical, engaging security training tailored to each function’s real risks
Be a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across Entrix
Your Profile
Mandatory Requirements

7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech company
Hands on experience in cloud security (ideally AWS) and identity and access management across SaaS tools
An automation first mindset: you solve problems with scripts, tooling and guardrails rather than manual processes
Hands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implications
Experience leading incident response
Track record of building security awareness and culture across technical and non technical teams
Clear communicator who can explain risk to engineers and management

Skills to Set You Apart

Security experience in the energy sector or with industrial control systems
A recognised security certification such as CISSP, CISM or ISO 27001 Lead Implementer
Experience building security in a company with several entities or countries
Working proficiency in German
Your Benefits
Competitive Compensation Package: Including salary and benefits
Jobticket access
Wellpass access
Lunch/Dinner Allowance Vouchers: Allowance for meals on working days as digital meal vouchers
Work Equipment: MacBook or Windows Laptop and ergonomic workplace
Your Contact in our People Team
Your contact person is Varsha Singh (Talent Acquisition), if you have questions please reach out directly to talent@entrixenergy.com .