Cyber Security & ISMS Specialist (Kassel Hybrid, DE)

SMA Solar Technology AG
Niestetal, Germany
29 days ago
Apply on sma.jobs
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Job source

Tech stack

Software System Penetration Testing Cyber Security Requirements Management Software Vulnerability Management Information Security Management System Information Technology

Job description

In this role, you will be responsible for managing cyber security requirements for our large-scale energy storage projects and engineering processes. You will ensure that security-related requirements are captured, documented, tracked, and implemented throughout the entire project lifecycle in a structured and customer-compliant manner. Working closely with customers, suppliers, project teams, and internal stakeholders, you will play a key role in enabling secure and reliable energy storage solutions. This is an opportunity to drive change while helping us rethink energy together. Your mission - what you can expect from us:

  • ISMS & Compliance: Developing, maintaining, and continuously improving information security policies, processes, and work instructions in line with ISO 27001 and ISO 27019 requirements.
  • Requirements Management: Coordinating and aligning cyber security requirements with customers, information security officers, internal departments, and project teams across all project phases.
  • Risk Management: Performing asset-specific risk assessments, tracking mitigation measures, and maintaining the associated risk register.
  • Audits & Certifications: Preparing, supporting, and following up on ISMS audits as well as customer- and project-specific certifications and compliance activities.
  • Security Operations: Managing security incidents, vulnerability management activities, and coordinating external penetration tests, including scoping, execution support, and technical reporting.

Requirements

  • Degree in Computer Science, Electrical Engineering, Information Security, Industrial Engineering, or a comparable qualification.
  • Experience in information security, OT security, or technical compliance management.
  • Strong understanding of OT systems, industrial networks, operational processes, and safety-critical environments.
  • Knowledge of ISMS frameworks, risk assessment methodologies, and audit processes, ideally according to ISO 27001 and ISO 27019.
  • Experience with relevant standards and regulatory requirements such as IEC 62443 or BSI IT-Grundschutz, ideally within the energy sector.

Benefits & conditions

Does this sound interesting to you? Follow the links below to learn more about some of our projects:

  • Project St. Eustatius: 100% Caribbean Solar Power
  • Project Hydrogen Dune
  • Project BigBattery Lausitz at the Schwarze Pumpe site

We shape alternative energy solutions for future generations. Join our young, passionate team and become part of our success story. As part of the SMA Group, you’ll enjoy attractive corporate benefits while working in a dynamic and innovative environment. We look forward to receiving your application!

Your contact: Hannah Höster | SMA Altenso GmbH| Phone: +49 561 9522-0 #SMA Altenso GmbH *At Altenso, we stand for equal opportunity and diversity - regardless of gender, age, origin, religion, disability, or sexual orientation.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on sma.jobs
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:47 min

Exploring career opportunities and recruitment open positions

Kurt Eder · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

2:54 min

Mapping AI integration across the software development lifecycle

Mike Mike · World Congress 2025

42 sec

Energy forecasts and resource demands of information technology

Marjolein Pordon · LIVE

5:03 min

Navigating new cybersecurity compliance frameworks and laws

Kurt Eder · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all