Head of Security (f/m/d)

1KOMMA5° At 1KOMMA5° , we pursue a clear vision: Living on wind and sunlight forever for free . To make this a reality, we are building the energy system of the future with Heartbeat AI. Want to be part of it? We bring together regional craftsmanship and scalable software: We don't think of solar, batteries, heat pumps, and e-mobility as isolated components, but control them as an intelligent, integrated overall system in our virtual power plant. Directly connected to the electricity market – in real time, fully automated. This way, energy is used when it is available from renewables and particularly cost-effective. By 2030, our goal is to transition 1.5 million households to renewable energies. Over 3,000 people are working towards this every day, at more than 80 locations worldwide, from Finland to Australia. Want to take responsibility and build solutions that truly matter? Apply now and help us shape the energy world of tomorrow. Become a part of our mission and learn about our Product & Tech team! Deine Position As Head of Security, you are the security owner for Heartbeat AI GmbH, the company that builds software for the 1KOMMA5° group. You lead Team Trust, our security team inside the Core Platforms domain, and you are the person the technology organisation and the wider group turn to on security questions. What makes this different from most security leadership roles: we don't only protect data centres and laptops. We run connected energy systems in people's homes, and those systems are part of critical energy infrastructure. You protect exactly the infrastructure that drives the transition towards renewable energy. This is a hands-on leadership role. You build the team and the framework, and you stay close enough to the technology to make good calls yourself. Key responsibilities include but are not limited to: Leading Team Trust: direction, hiring, growth, health and mentoring. Cloud and IoT Security: protect our cloud, our applications, and the connected hardware in our customers' homes. Risk and Compliance: own cybersecurity frameworks and the regulations that applies to energy companies. Identity and Access Management: internal permissions and secure development that scale with the engineering org. Security as a Product: capabilities developers use by default. Translating Risk: make security risk concrete for non-technical decision makers, up to C-level. Technologies your team works with include: Google Cloud Platform, Vercel Auth0 Wiz GitHub Advanced Security Terraform / Terramate Datadog, OpenTelemetry, Cursor, MCP, and agentic engineering workflows TypeScript, Python and GoLang Dein Profil Several years of experience in security engineering or security leadership, including leading or mentoring engineers. A technical background in cloud security, preferably Google Cloud Platform, with enough depth to reason about infrastructure, CI/CD, identity, and application security. Startup agility: you have built a security framework fr