Head of Security (f/m/d)

Role overview Lead security for a software organisation that operates a virtual power plant connecting home energy hardware (solar, batteries, heat pumps, e-mobility) into a unified, automated system. This is a hands-on leadership role protecting critical energy infrastructure, not a traditional corporate IT post: the systems you secure help drive the transition to renewable power for households.

Responsibilities - Lead and grow Team Trust, setting direction, hiring, mentoring, and maintaining team health. - Own cloud, application, and IoT security across the platform and the connected hardware deployed in customers' homes. - Run risk and compliance, maintaining cybersecurity frameworks (e.g., NIST CSF, ISO 27001) and the regulations that apply to energy companies (e.g., NIS2, KRITIS). - Drive identity and access management and embed secure-development practices that scale with the engineering organisation. - Treat security as a product, building capabilities developers use by default. - Translate security risk into concrete terms for engineers, product managers, and senior business stakeholders up to C-level.

Requirements - Several years in security engineering or security leadership, including leading or mentoring engineers. - Technical depth in cloud security (ideally Google Cloud Platform) covering infrastructure, CI/CD, identity, and application security. - Startup agility: experience building a security framework from scratch rather than inheriting one. - Familiarity with frameworks such as NIST CSF and ISO 27001, and ideally critical-infrastructure rules such as NIS2 and KRITIS. - Strong communication skills and a pragmatic, outcome-oriented way of working. - Excellent English; German is a plus.

Nice to have - Hands-on coding experience. - Background in AI-assisted engineering setups, including agentic workflows and their guardrails. - Experience running or coordinating security incident response. - Familiarity with security and IT controls in a company preparing for a public listing. - Scale-up experience in organisations of roughly 100 to 1,000 employees. - Genuine interest in climate tech and renewable energy.

Benefits and work setup - Remote-first across Germany with a flexible remote policy and offices in Hamburg, Berlin, and Munich available when needed. - Flat hierarchies and short decision paths so work reaches production quickly. - Direct contact with core decision-makers. - Access to a well-being programme (EGYM Wellpass), partner benefits and discounts platform, and a job-bike leasing scheme.