Share this Job

Head of IT Security m/f/t

RWE Supply & Trading GmbH, IT Security, Essen, Germany (DE) or Swindon, United Kingdom (GB)

To start as soon as possible, Full time, Permanent


Your future plans

  • Defining and developing a future proof strategy of IT Security Services with RWE Group (including RWE Supply & Trading GmbH, RWE AG and RWE Generation SE) in a challenging and rapidly changing environment in close cooperation with the CISO office.
  • Member of the CSSB (Cyber Security Steering board) advising senior executives on cyber security matters and strategy.  
  • Accountable for the software Lifecyle of COTS (commercial off-the-shelf) software used in IPM in relation to rationalisation, standards and on-going management.
  • Accountable for the delivery of Active Directory (DHCP, DNS, Accounts) and connected Office365, and Windows 10 services to RWE.
  • IT Security service delivery for our customers as agreed and defined within Regulation, Compliance and RWE Group Security requirements for RWE.
  • Working within the ISO27000 series framework for Information Security Risk Management to deliver the IT Security Programme and operate an Information Security Management System (ISMS).
  • Management of services using established industry best practices such as CIS (Center for Internet Security) Critical Security Controls.
  • Defining IT Security best practice and standards for infrastrcuture and application security of the RWE AG organisation. Working across all teams and technology departments to ensure security practice is correctly implemented and relevant departments upskilled in IT Security .This includes OWASP (Open Web Application Security Project) IT Infrastructure Security from server to desktop. Cloud, identity management, penetration testing and database security.
  • Steering (planning, forecast, actual) of agreed budget and assessment of goal achievement
  • Proactive demand management and Service ownership
  • Roadmapping of IT Security and workplace technology services in RWE (to meet business requirements and rapidly evolving threats to our organisation)
  • Continuous improvement and monitoring of the effectiveness of the IT Security set-up to prevent Cyber-attacks. Regular reporting of Key Risk & Key Performance Indicators (KRI & KPI) as well as the IT security control operating effectiveness to the CISO Office (Chief Information Security Officer).
  • Work closely with the Group Security CSIRT (Cyber Security Incident Response Team) and other managed service providers with regards to management of cyber security incidents and forensic analyses and investigations.
  • Optional member within the Crisis Management team for response plans to Cyber-attacks or Dawn raids.
  • Industry benchmarking and determination of IT Security services and solutions effectiveness (risk reduction) vs. cost and value for money.
  • Foster intercultural abilities & manage IT staff across all areas of RWE AG.


Your powerful skills

  • 5 - 8 years of IT security experiences in a large complex organisation, good understanding of the energy generation and/or energy trading industry and required IT infrastructure, certified Information Security Systems Professional (CISSP) or Certified Information Systems Manager (CISM) qualified and member in good standing, excellent knowledge of the IT Security triad principles (especially in depth knowledge on ITIL Service Management Processes) and knowledge of ISMS and ISO27000 standards as well as technical knowledge of IT disciplines such as networks, firewalls, directory services, cryptography, end client computing, servers and access controls
  • Lead and manage change, thinking creatively ‘outside the box’ to deliver innovative and cost effective strategies and roadmaps that work end-to-end and can be adapted as required
  • Be able to influence and work effectively in multiple cultures and at a range of levels. Ideally relationship management experience from an IT and business perspective, experience of managing various and conflicting business demands and prepare, manage and control budgets adhering to IT Controlling processes and standards
  • Inspires and motivates others demonstrating drive and passion as well as innovative problem solving skills and excellent interpersonal skills including cultural and ethical awareness
  • Experience in leading international multi-disciplinary and multi-site development teams and strong leadership and communication skills at all management levels to drive change
  • Project management skills and experience in managing and steering of 3rd party providers (including managed service)
  • Self-reliant and able to work to own initiatives, ability to work under pressure – patient, tolerant and resilient, results orientated and business fluent in English and German as well as willingness to travel


Benefits you can rely on

  • The IPM function is a fast moving dynamic area (team headcount will increase by 50%) with extensive opportunity to personally develop and gain experience through critical IT change programmes and operations. (In the next 2 years IPM will service 10x customers in over 150 locations).
  • IPM continually has to adapt and change infrastructure technologies and processes in order to respond to rapid change in demands from the RWE businesses.
  • The role has been designed to take responsibility for the identification and delivery of innovative infrastructure solutions to be delivered to the RWE customer base.
  • The role will provide collaboration opportunities and ownership for delivering  customer improvement initiatives through internal and third party IT technical providers.


At RWE, you will find all the advantages of a large technology group. And some merits that are even more crucial: openness and real team work. For we are open to the future and are building on the strengths of each and every individual. We value his/her work and opinion; we listen, pursue active ideas management and engage in direct exchanges. Respect, appreciation and mutual trust are the hallmarks of cooperation within the international RWE team.

Apply now with just a few clicks: Ad code 15143

Any questions? Katharina von der Stein (Recruiting), T: +49 201 5179-3984, Edward Bouwmans (specialist department) T: +49 201 5179-2124

We look forward to meeting you!


We value diversity and therefore welcome all applications, irrespective of sex, disability, nationality, ethnic and social background, religion and beliefs, age or sexual orientation and identity.

Of course, you can find us on LinkedIn, Facebook, Twitter and Xing, too.


Powering. Reliable. Future. This is RWE. Supplying the future with renewable energy requires not only courage and visions, but the security of a reliable infrastructure as well. RWE has 120 years of experience in an energy world that is constantly changing. And a clear future strategy.


50 Energy Traders. 260 additional experts on the floor. Another 1000 professionals aside. Become part of RWE Supply & Trading and shape the future of the trading business to make energy reliable.

Job Segment: Social Media, Cloud, Information Systems, Risk Management, Relationship Manager, Marketing, Technology, Finance, Customer Service

Find similar jobs: