Cyber Security & ISMS Specialist

SMA Solar Technology AG; Kassel; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Altenso, a subsidiary within SMA Solar Technology AG, is seeking a cybersecurity professional in Kassel to lead information security across large-scale energy storage projects.

You will develop and maintain ISMS aligned with ISO 27001/27019, coordinate security requirements with customers and project teams, and manage risk assessments, audits, and security operations to enable secure, reliable energy storage solutions.

Qualifikationen

• Degree in Computer Science, Electrical Engineering, Information Security, industrial engineering, or similar.
• Experience in information security, OT security, or technical compliance management.
• Strong understanding of OT systems, industrial networks, operational processes, and safety-critical environments.
• Knowledge of ISMS frameworks, risk assessment methodologies, and audits (ISO 27001/27019).
• Experience with standards like IEC 62443 or BSI IT-Grundschutz, ideally in energy.

Aufgaben

• Develop and maintain information security policies and processes per ISO 27001/27019.
• Coordinate cyber security requirements with customers, officers and project teams.
• Perform asset-specific risk assessments and maintain risk register.
• Prepare for ISMS audits and certifications.
• Manage security incidents, vulnerability management, and coordinate penetration tests.

Kenntnisse

Information security

OT security

Regulatory compliance

Risk assessment

Audit management

Ausbildung

Degree in Computer Science, Electrical Engineering, Information Security or comparable qualification

Tools

ISO 27001 / ISO 27019 knowledge

IEC 62443 knowledge

BSI IT-Grundschutz knowledge

Jobbeschreibung

Required Travel: Ocassional travel availability

Location: Kassel Hybrid, DE

POWER FOR ENERGY - We are a young, diverse, and dynamic company with more than 130 employees from over 20 nationalities, driving the energy transition by delivering innovative energy projects worldwide.

As an international system integrator, we develop and commission solutions with a focus on complex energy systems. These include large-scale battery storage systems, hydrogen applications, as well as island and hybrid solutions for both off-grid and grid-connected energy supplies.

Our company, based in Niestetal (Germany), Cape Town (South Africa) and Sydney (Australia), is a wholly owned subsidiary of SMA Solar Technology AG.

In this role, you will be responsible for managing cyber security requirements for our large-scale energy storage projects and engineering processes. You will ensure that security-related requirements are captured, documented, tracked, and implemented throughout the entire project lifecycle in a structured and customer-compliant manner. Working closely with customers, suppliers, project teams, and internal stakeholders, you will play a key role in enabling secure and reliable energy storage solutions. This is an opportunity to drive change while helping us rethink energy together.

Your mission – what you can expect from us:

• ISMS & Compliance: Developing, maintaining, and continuously improving information security policies, processes, and work instructions in line with ISO 27001 and ISO 27019 requirements.
• Requirements Management: Coordinating and aligning cyber security requirements with customers, information security officers, internal departments, and project teams across all project phases.
• Risk Management: Performing asset-specific risk assessments, tracking mitigation measures, and maintaining the associated risk register.
• Audits & Certifications: Preparing, supporting, and following up on ISMS audits as well as customer- and project-specific certifications and compliance activities.
• Security Operations: Managing security incidents, vulnerability management activities, and coordinating external penetration tests, including scoping, execution support, and technical reporting.

Your profile – what you bring with you:

• Degree in Computer Science, Electrical Engineering, Information Security, Industrial Engineering, or a comparable qualification.
• Experience in information security, OT security, or technical compliance management.
• Strong understanding of OT systems, industrial networks, operational processes, and safety-critical environments.
• Knowledge of ISMS frameworks, risk assessment methodologies, and audit processes, ideally according to ISO 27001 and ISO 27019.
• Experience with relevant standards and regulatory requirements such as IEC 62443 or BSI IT-Grundschutz, ideally within the energy sector.

Does this sound interesting to you?

• Project BigBattery Lausitz at the Schwarze Pumpe site

We shape alternative energy solutions for future generations. Join our young, passionate team and become part of our success story.
As part of the SMA Group, you’ll enjoy attractive corporate benefits while working in a dynamic and innovative environment.

*At Altenso, we stand for equal opportunity and diversity – regardless of gender, age, origin, religion, disability, or sexual orientation.