IT-Security Manager protecting IT infrastructure and ensuring resilience for the energy transition. Focused on cloud, network security, and compliance with key standards.
Responsibilities
Responsibility for IT security
Protection of IT infrastructure, in particular cloud, network and critical production systems
Ensuring endpoint, application and identity security (IAM, MFA, Conditional Access)
Implementation of Zero-Trust architectures and network segmentation
Compliance with standards such as ISO 27001 and legal requirements (KRITIS, NIS2)
Development and implementation of comprehensive technical security concepts and policies
Conducting security architecture reviews for new projects and technologies
Introduction and maintenance of KPIs to measure the security posture
Proactive identification, assessment and remediation of IT security risks
Continuous monitoring and response to security incidents
Advising internal departments on security matters related to cloud, IoT and new software solutions
Organizing and tracking actions arising from ISO 27001 audits
Requirements
Degree in IT, IT security or equivalent qualification — alternatively several years of relevant professional experience with appropriate further training
Several years of experience in technical IT security, ideally in the energy sector, critical infrastructures or other regulated industries
Solid know-how in network security, cloud security (Microsoft Azure), Zero-Trust architectures and modern security solutions
Experience with sovereign cloud solutions, data sovereignty and data residency
Practical experience in Identity & Access Management (IAM, MFA, Conditional Access) and working with SIEM/SOC environments
Knowledge of current standards and methods (ISO 27001, BSI IT-Grundschutz, NIS2, KRITIS) — certifications such as CISSP or Microsoft Security are an advantage
Analytical and conceptual thinking, solution-oriented and structured way of working
Strong communication skills and enjoyment of interdisciplinary collaboration
Very good German and English language skills
Driver’s license and mobility required
Benefits
30 days of annual leave per year (additionally off on 24th and 31st December)
Overtime tracking that can be converted into flex-time days
Individual development opportunities and training programs
Collegial, first-name culture and commitment to diversity
Employee discounts via the Corporate Benefits platform
Monthly benefits budget of €50, flexibly usable for sports, shopping or mobility
Access to the company health insurance fund BKK EWE
Company pension plan with salary conversion including a 20% employer contribution
Various leave options through time-value account management (e.g. sabbatical, part-time)
Significant opportunities for participation and welcome contribution of employee ideas
Residence Hall Security Coordinator ensuring safety and security in university residence halls. Monitoring security during nighttime hours and providing customer service to residents.
Information Security Risk Specialist assisting Air Force or Space Force organizations with cyber risk assessment. Guiding clients in developing mitigation plans to secure communications systems.
Senior Health, Safety and Environment Technician managing SSMA compliance in industrial projects. Leading a safety team and ensuring legal conformity in various industrial settings.
Security Architect at Leonardo designing and implementing security solutions in Cyber & Security Solutions. Collaborating with technical teams to protect data and resources effectively.
Security Architect in Cyber Security Solutions for Leonardo, analyzing client objectives and designing multi - layered architectures. Requires 2 - 5 years of experience with security controls.
FPGA Engineer addressing security risks in evolving Defence technology by designing secure firmware and integration support. Collaborating with teams to develop security solutions and maintain accreditation standards.
Staff Software Engineer leading security transformation for Managed File Transfer platform at Walmart. Focusing on modernization, automation, and security - first design.
Lead Penetration Testing Engineer handling advanced penetration testing across applications and enterprises. Collaborating with teams to influence security design and reporting on findings.
Infrastructure Security Engineer responsible for managing customer engagements and project delivery at Hewlett Packard Enterprise. Requires a Secret clearance and extensive project management experience.
Senior Security Engineer protecting Plaud's AI infrastructure and data. Designing security controls and leading incident response for a next - generation AI productivity platform.