> Markdown version of [/jobs/ext/3850198-information-security-officer](https://www.wearedevelopers.com/jobs/ext/3850198-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Officer

- **Company:** Entrix GmbH
- **Location:** München, Germany
- **Experience:** Expert
- **Salary:** €110,000.0 - €130,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software as a Service, Cloud Computing Security, Cyber Security, Data Integrity, Identity and Access Management, Anti-Phishing, Software Vulnerability Management, Information Security Management System, Process Control Systems
- **Published:** October 21, 2026
- **Apply:** https://startup.jobs/information-security-officer-d-f-m-bei-entrix-gmbh-10517368

## About the Role

* 7+ years in information security, including owning an information security management system or security program end to end, ideally in a fast growing tech company
 * Hands on experience in cloud security (ideally AWS) and identity and access management across SaaS tools
 * An automation first mindset: you solve problems with scripts, tooling and guardrails rather than manual processes
 * Hands-on experience with ISO27001 implementation and audits, and working knowledge of NIS2 and its implications
 * Experience leading incident response
 * Track record of building security awareness and culture across technical and non technical teams
 * Clear communicator who can explain risk to engineers and management

Skills to Set You Apart

 * Security experience in the energy sector or with industrial control systems
 * A recognised security certification such as CISSP, CISM or ISO 27001 Lead Implementer
 * Experience building security in a company with several entities or countries
 * Working proficiency in German

## Description

As Information Security Officer you will

 * Shape a modern security strategy for an AI-first energy trading company, grounded in how AI is changing the threat landscape (AI-assisted phishing, deepfakes, automated attacks)
 * Own business continuity and disaster recovery for a 24/7 trading operation: realistic plans, regular failover drills and clear recovery targets for trading-critical systems
 * Look beyond cyber at technology and operational risk, such as cloud and vendor dependencies, single points of failure, key-person risk, outages and data integrity, and drive mitigations with the owners
 * Make ISO 27001 and NIS2 compliance a byproduct of good practice: lean policies, automated evidence and clear risk reporting to management
 * Build security into how every team works through secure defaults, automated guardrails and simple mechanisms, so teams move fast and stay safe
 * Define identity and access standards across our tools and tenants with IT, built on least privilege, SSO and automation rather than manual approvals
 * Own detection and response across cloud, trading platform, connected battery assets and company IT, using automation and AI wherever they beat manual work
 * Run continuous vulnerability management and offensive testing (pen tests, red teaming, phishing simulations) and drive findings to resolution
 * Assess supplier risk, including AI vendors, and turn customer security questionnaires into a fast, reusable trust story for Sales
 * Design practical, engaging security training tailored to each function's real risks
 * Be a partner to every team, not a gatekeeper: set pragmatic standards, coach people and grow a security mindset across Entrix