The positionThe role of the Information Security Manager is to operate the information security management system of Sympower as per ISO 27001. It’s an inherently cross-departmental role, as the Information Security Management System has policies and procedures that affect the entire company. The system ensures the security of Sympower’s data and systems, which includes data protection, integrity and continued availability and business continuity. The person will also be responsible for external communication with customers and partners about security related issues, answering questionnaires and handling any incoming requests or incidents via the security email inbox. The person will also oversee audits, contact with certification bodies and security budgets.What is in it for youWe are committed to creating an inclusive and values based culture where everyone feels that they belong, and where everyone has the opportunity to do meaningful work.We offer a market competitive compensation package, including but not limited to:<ul><li>30 Days Paid Holiday Leave</li><li>1 Day Paid Wellness Leave</li><li>1 Day Paid Birthday Leave</li><li>Paid Maternity and Partner Leave</li><li>Pawternity Leave</li><li>Mental Health and Wellbeing Support</li><li>Remote Office Budget</li><li>Internet Allowance</li><li>Development Plan &amp; Budget</li><li>Stock Appreciation Rights</li><li>2 Days Paid Volunteer Leave</li></ul>Learn about all of our benefits on our <a href="https://careers.sympower.net/yourbenefits">careers page</a>. What you will doThis is your opportunity to shape Sympower’s cybersecurity position and influence company-wide processes.<ul><li>Information Security Management System (ISMS):<ul><li>Oversee the ISMS based on our chosen standard ISO 27001, including policy and procedure updates, document reviews, and audits.</li><li>Organize and lead internal audits, management reviews, and external ISO 27001 audits.</li><li>Conduct regular ISMS Governance Council updates to inform leadership of the cybersecurity landscape and ISMS performance.</li><li>Ensure that the ISMS complies with NIS2.</li></ul></li><li>Risk and Compliance:<ul><li>Perform risk analyses and coordinate risk mitigation strategies.</li><li>Handle non-conformities, implement corrective actions, and maintain compliance documentation.</li><li>Manage vendor security, ensuring third-party compliance with Sympower’s security standards.</li><li>Take part in incident retrospectives.</li></ul></li><li>Training and Awareness:<ul><li>Plan and conduct security awareness training for employees.</li><li>Foster a company-wide understanding of security policies and their impact on day-to-day operations.</li></ul></li><li>Collaboration and Leadership:<ul><li>Facilitate cross-departmental collaboration to implement security measures effectively.</li><li>Be available to support and take part in customer facing interactions that require explanation of our ISMS.</li><li>Lead the security team without direct managerial authority, driving results through influence and coordination</li><li>Work closely with product managers, legal, and Engineering Operations to balance feature delivery and security.</li></ul></li><li>Overseeing Product Security Development Practices<ul><li>Managing and reviewing our Pen Tests, making sure our Product Development teams have the correct knowledge to act on the outcomes</li><li>Handling Customer Security Policies and Questionnaires</li></ul></li></ul><ul><li>Fluent written and spoken English; other European languages also beneficial</li><li>Experience managing or implementing ISO 27001 ISMS.</li><li>Background in IT security, risk management, or compliance.</li><li>Familiarity with cloud-first environments and remote-first organizations.</li><li>Project Management and Organisational Skills:<ul><li>Proven ability to coordinate complex, cross-departmental projects with precision and efficiency.</li><li>Experience managing systems and processes with multiple interdependencies.</li></ul></li><li>Systematic Thinking: Deep understanding of structured systems like ISO 27001 ISMS, with the ability to navigate interlinked documents and processes effectively.</li><li>Security Knowledge:<ul><li>Solid understanding of IT security fundamentals, DevSecOps processes, risk management, and data protection. In-depth cryptography knowledge is not required, but a foundational understanding is essential.</li><li>Knowledge of such applications as SIEM and Risk management tools</li><li>Experience with OWASP Top 10, SANS, and other security frameworks.</li></ul></li><li>Organisational Awareness: Experience in developing and implementing policies with a keen awareness of their practical implications on teams and workflows.</li><li>Communication and Presentation:<ul><li>Ability to present information clearly and actionably to diverse stakeholders, including senior leadership and external auditors.</li><li>Skilled at translating complex security concepts into accessible language.</li><li>Ability to speak with customers on security related topics</li></ul></li><li>Leadership without Authority: Track record of influencing teams and driving outcomes in environments without direct reporting lines.</li></ul>Who we areSympower is accelerating the global transition towards ‘net-zero’ by helping to build smarter, cleaner renewable energy systems. Using our proprietary software platform, we help balance the supply and demand of electricity across international energy networks.We help businesses, grid operators, asset owners and other energy stakeholders around the world reduce their carbon emissions, integrate more distributed renewable energy resources, and generate new revenue streams by participating in demand-side response services.Learn more about us in this <a href="https://youtu.be/0vqPLXC9h2c">video</a>.In 2022, Sympower became a<a href="https://sympower.net/sympower-joins-the-b-corp-community/"> </a><a href="https://sympower.net/sympower-joins-the-b-corp-community/">certified B Corp</a>, which shows the company is meeting high standards of verified performance, accountability, and transparency across 5 impact areas: governance, workers, community, environment, and customers.Sympower is an equal opportunity employer. We encourage a diverse workforce and are committed to creating an inclusive environment for all team members.Your personal data will be processed in accordance with our <a href="https://sympower.net/privacy-policy/">Privacy Policy</a>. MESSAGE TO RECRUITMENT AGENCIES: support for filling this position is not required, so proposals for recruitment services will not be reviewed or responded to.

Sympower partners with leading industry players to shape a net-zero future. We unlock revenue streams and stabilise grids by maximising the value of flexibility across energy markets and industries, as it is crucial for the energy transition that all assets are flexible. We utilise our advanced and automated flexibility capabilities to temporarily adjust the power of systems, machines and processes when the grid is out of balance. By using our non-intrusive software solutions, our customers enhance the value of their energy assets and provide an essential service that enables a fully-renewable grid.


Information Security Manager

The positionThe role of the Information Security Manager is to operate the information security management system of Sympower as per ISO 27001. It’s an inherently cross-departmental role, as the Information Security Management System has policies and procedures that affect the entire company. The system ensures the security of Sympower’s data and systems, which includes data protection, integrity and continued availability and business continuity. The person will also be responsible for external communication with customers and partners about security related issues, answering questionnaires and handling any incoming requests or incidents via the security email inbox. The person will also oversee audits, contact with certification bodies and security budgets.What is in it for youWe are committed to creating an inclusive and values based culture where everyone feels that they belong, and where everyone has the opportunity to do meaningful work.We offer a market competitive compensation package, including but not limited to:<ul><li>30 Days Paid Holiday Leave</li><li>1 Day Paid Wellness Leave</li><li>1 Day Paid Birthday Leave</li><li>Paid Maternity and Partner Leave</li><li>Pawternity Leave</li><li>Mental Health and Wellbeing Support</li><li>Remote Office Budget</li><li>Internet Allowance</li><li>Development Plan &amp; Budget</li><li>Stock Appreciation Rights</li><li>2 Days Paid Volunteer Leave</li></ul>Learn about all of our benefits on our <a href="https://careers.sympower.net/yourbenefits">careers page</a>.&nbsp;What you will doThis is your opportunity to shape Sympower’s cybersecurity position and influence company-wide processes.<ul><li>Information Security Management System (ISMS):<ul><li>Oversee the ISMS based on our chosen standard ISO 27001, including policy and procedure updates, document reviews, and audits.</li><li>Organize and lead internal audits, management reviews, and external ISO 27001 audits.</li><li>Conduct regular ISMS Governance Council updates to inform leadership of the cybersecurity landscape and ISMS performance.</li><li>Ensure that the ISMS complies with NIS2.</li></ul></li><li>Risk and Compliance:<ul><li>Perform risk analyses and coordinate risk mitigation strategies.</li><li>Handle non-conformities, implement corrective actions, and maintain compliance documentation.</li><li>Manage vendor security, ensuring third-party compliance with Sympower’s security standards.</li><li>Take part in incident retrospectives.</li></ul></li><li>Training and Awareness:<ul><li>Plan and conduct security awareness training for employees.</li><li>Foster a company-wide understanding of security policies and their impact on day-to-day operations.</li></ul></li><li>Collaboration and Leadership:<ul><li>Facilitate cross-departmental collaboration to implement security measures effectively.</li><li>Be available to support and take part in customer facing interactions that require explanation of our ISMS.</li><li>Lead the security team without direct managerial authority, driving results through influence and coordination</li><li>Work closely with product managers, legal, and Engineering Operations to balance feature delivery and security.</li></ul></li><li>Overseeing Product Security Development Practices<ul><li>Managing and reviewing our Pen Tests, making sure our Product Development teams have the correct knowledge to act on the outcomes</li><li>Handling Customer Security Policies and Questionnaires</li></ul></li></ul><ul><li>Fluent written and spoken English; other European languages also beneficial</li><li>Experience managing or implementing ISO 27001 ISMS.</li><li>Background in IT security, risk management, or compliance.</li><li>Familiarity with cloud-first environments and remote-first organizations.</li><li>Project Management and Organisational Skills:<ul><li>Proven ability to coordinate complex, cross-departmental projects with precision and efficiency.</li><li>Experience managing systems and processes with multiple interdependencies.</li></ul></li><li>Systematic Thinking: Deep understanding of structured systems like ISO 27001 ISMS, with the ability to navigate interlinked documents and processes effectively.</li><li>Security Knowledge:<ul><li>Solid understanding of IT security fundamentals, DevSecOps processes, risk management, and data protection. In-depth cryptography knowledge is not required, but a foundational understanding is essential.</li><li>Knowledge of such applications as SIEM and Risk management tools</li><li>Experience with OWASP Top 10, SANS, and other security frameworks.</li></ul></li><li>Organisational Awareness: Experience in developing and implementing policies with a keen awareness of their practical implications on teams and workflows.</li><li>Communication and Presentation:<ul><li>Ability to present information clearly and actionably to diverse stakeholders, including senior leadership and external auditors.</li><li>Skilled at translating complex security concepts into accessible language.</li><li>Ability to speak with customers on security related topics</li></ul></li><li>Leadership without Authority: Track record of influencing teams and driving outcomes in environments without direct reporting lines.</li></ul>Who we areSympower is accelerating the global transition towards ‘net-zero’ by helping to build smarter, cleaner renewable energy systems. Using our proprietary software platform, we help balance the supply and demand of electricity across international energy networks.We help businesses, grid operators, asset owners and other energy stakeholders around the world reduce their carbon emissions, integrate more distributed renewable energy resources, and generate new revenue streams by participating in demand-side response services.Learn more about us in this <a href="https://youtu.be/0vqPLXC9h2c">video</a>.In 2022, Sympower became a<a href="https://sympower.net/sympower-joins-the-b-corp-community/"> </a><a href="https://sympower.net/sympower-joins-the-b-corp-community/">certified B Corp</a>, which shows the company is meeting high standards of verified performance, accountability, and transparency across 5 impact areas: governance, workers, community, environment, and customers.Sympower is an equal opportunity employer. We encourage a diverse workforce and are committed to creating an inclusive environment for all team members.Your personal data will be processed in accordance with our <a href="https://sympower.net/privacy-policy/">Privacy Policy</a>.&nbsp;MESSAGE TO RECRUITMENT AGENCIES: support for filling this position is not required, so proposals for recruitment services will not be reviewed or responded to.

Information Security Manager

About the Job

About the Company

Sympower

Similar Jobs

SAM HUB IT Service Delivery Manager

SAM HUB IT Service Delivery Manager

Director of Information & Cybersecurity

Director of Information & Cybersecurity

Information System Security Officer

Information System Security Officer

Information Security Officer

Information Security Officer

Director of Information Security

Director of Information Security

Information Security Officer (ISO)

Information Security Officer (ISO)

Head of Information Security (f/m/d)

Head of Information Security (f/m/d)

Security Systems Support Specialist

Security Systems Support Specialist

Senior Security Analyst

Senior Security Analyst

IT Security Consultant

IT Security Consultant