Head of Security

Stack

Responsibilities

• ▹Lead Team Trust: direction, hiring, growth, health and mentoring
• ▹Cloud and IoT security: protect the cloud, applications and connected hardware in customers' homes
• ▹Risk and compliance: own cybersecurity frameworks and the regulations that apply to energy companies
• ▹Identity and access management: internal permissions and secure development that scale with the engineering org
• ▹Security as a product: build capabilities developers use by default
• ▹Translate risk into concrete terms for non-technical decision makers, up to C-level

Requirements

• ▹Several years of experience in security engineering or leadership, including leading or mentoring engineers
• ▹Technical background in cloud security, preferably Google Cloud Platform, with enough depth to reason about infrastructure, CI/CD, identity and application security
• ▹Startup agility: having built a security framework from scratch or close to it, with limited resources
• ▹Regulatory knowledge: NIST CSF, ISO 27001, ideally NIS2 and KRITIS
• ▹Strong communication skills, excellent English

Nice to have

• ▹German language skills

Soft skills

About the company

1KOMMA5°'s vision is living on wind and sunlight forever for free; with Heartbeat AI it builds the energy system of the future, combining regional craftsmanship with scalable software to control solar, batteries, heat pumps and e-mobility as one intelligent, integrated virtual power plant connected directly to the electricity market in real time. Its goal is to transition 1.5 million households to renewables by 2030, with 3,000+ people working across 80+ locations worldwide.