Head of Security (f/m/d)

1Komma5°

4d•Remote

About The Position

As Head of Security, you are the security owner for Heartbeat AI GmbH, the company that builds software for the 1KOMMA5° group. You lead Team Trust, our security team inside the Core Platforms domain, and you are the person the technology organisation and the wider group turn to on security questions. This role is unique because it involves protecting connected energy systems in people's homes, which are part of critical energy infrastructure, rather than just data centres and laptops. You will protect the infrastructure that drives the transition towards renewable energy. This is a hands-on leadership role where you will build the team and the framework, and stay close enough to the technology to make informed decisions.

Requirements

Several years of experience in security engineering or security leadership, including leading or mentoring engineers.
A technical background in cloud security, preferably Google Cloud Platform, with enough depth to reason about infrastructure, CI/CD, identity, and application security.
Startup agility: you have built a security framework from scratch, or close to it, with limited initial resources and a clear view of what matters first.
Regulatory knowledge: you are familiar with cybersecurity frameworks such as NIST CSF and ISO 27001, and ideally with critical infrastructure rules like NIS2 and KRITIS.
Strong communication skills and the ability to make security risk concrete for engineers, product managers, and senior business stakeholders.
A pragmatic, outcome-oriented way of working.
Excellent English communication skills; German is a plus.

Nice To Haves

Hands-on coding experience.
Experience with security in an AI-assisted engineering setup, including agentic workflows and their guardrails.
Experience running or coordinating security incident response.
Experience with security and IT controls in a company preparing for a public listing.
Experience in a scale-up environment with roughly 100 to 1000 employees.
Interest in climate tech and renewable energy.

Responsibilities

Leading Team Trust: direction, hiring, growth, health and mentoring.
Cloud and IoT Security: protect our cloud, our applications, and the connected hardware in our customers' homes.
Risk and Compliance: own cybersecurity frameworks and the regulations that applies to energy companies.
Identity and Access Management: internal permissions and secure development that scale with the engineering org.
Security as a Product: capabilities developers use by default.
Translating Risk: make security risk concrete for non-technical decision makers, up to C-level.