Information Security Officer (d/f/m)

Schedule: full-time Employment: permanent Years of experience: 7-10 Salary: 110000 to 130000 EUR per year Short Facts Location: Munich, Germany Employment Type: Full-Time, indefinite term Salary Range: € 110.000 - 130.000 per year gross depending on the seniority level Working Mode: Office-first Language Requirement: C1 Level English Your Responsibilities As Information Security Officer you will Shape a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks) Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systems Look beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the owners Make ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to management Build security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safe Define identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvals Own detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual work Run continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolution Assess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for Sales Design practical, engaging security training tailored to each function’s real risks Be a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across Entrix Your Profile Mandatory Requirements 7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech company Hands on experience in cloud security (ideally AWS) and identity and access management across SaaS tools An automation first mindset: you solve problems with scripts, tooling and guardrails rather than manual processes Hands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implications Experience leading incident response Track record of building security awareness and culture across technical and non technical teams Clear communicator who can explain risk to engineers and management Skills to Set You Apart Security experience in the energy sector or with industrial control systems A recognised security certification such as CISSP, CISM or ISO 27001 Lead Implementer Experience building security in a company with several entities or countries Working proficiency in German Your Benefits Competitive Compensation Package: Including salary and benefits Jobticket access Wellpass access Lunch/Dinner Allowance Vouchers: Allowance for meals on working days as digital meal vouchers Work Equipment: MacBook or Windows Laptop and ergonomic workplace Your Contact in our People Team Your contact person is Varsha Singh (Talent Acquisition), if you have questions please reach out directly to  talent@entrixenergy.com .