A secure and reliable energy supply is a key prerequisite for a functioning society.
The Corporate Security department develops and manages security and resilience strategies for TenneT Germany. It implements and monitors the Information Security Management System (ISMS) and ensures physical and personnel security, including site protection and sabotage prevention. In addition, it manages business continuity and crisis preparedness, monitors threats, coordinates incident response, and conducts forensic analyses. The unit ensures compliance with legal requirements, collaborates with external agencies, conducts security awareness programs and training, and develops internal security policies. It operates independently under the management team and bears primary responsibility for the Chief Security Officer and CISO functions.
TenneT Germany is the largest transmission system operator in Germany. The company operates critical infrastructure that provides access to a reliable and affordable electricity supply. TenneT Germany is one of the largest investors in onshore and offshore power grids in Germany. Located at the heart of the northwestern European energy hub, TenneT Germany connects: North and South. Offshore and onshore. Germany and Europe. With over 5,000 employees, the company builds, operates, and maintains Germany’s largest transmission grid, which spans over 14,700 km and connects more than one-third of the European Union’s total offshore wind capacity. The integration of the North Sea—one of the world’s largest sources of renewable energy—plays a central role in this. Our growth is driven by rapidly increasing electricity demand, which requires a flexible and expanding grid architecture.
Your Contribution to TenneT
As Head of Security Governance & Cybersecurity (m/f/d) in Bayreuth or Lehrte, you will assume a key leadership role within our Corporate Security department and handle key responsibilities of the CISO role. Together with your team, you will shape and steer the cybersecurity strategy and security governance at the enterprise level.
In this role, you will serve as the central point of contact between internal and external stakeholders, bridging the gaps between cybersecurity, security governance, enterprise security risk management, technological sovereignty, and compliance & assurance
You are responsible for the strategic development of cybersecurity—including the vision, roadmap, and security portfolio—as well as for strengthening cyber recovery capabilities in coordination with business continuity and crisis management
You will manage company-wide security governance and continuously develop the security management system, processes, standards, as well as security awareness and security culture
You will develop the enterprise security risk management framework and ensure that security risks, critical dependencies, and third-party and supply chain risks are transparently assessed and effectively managed
You are responsible for implementing regulatory requirements as well as compliance, assurance, audits, and certifications, and you represent the division in dealings with regulatory authorities, auditors, and industry initiatives
You will advise management and key stakeholders on cybersecurity risks and strategic issues, and—in collaboration with our network of security business partners—further develop a unified, risk-based security management framework within the company
Your Profile
This position requires a degree (university or university of applied sciences) in the fields of cybersecurity, information security, computer science, business informatics, risk management, or a related field. Alternatively, you have a comparable qualification
You bring extensive professional and leadership experience in cybersecurity, information security, or security governance. You lead your team with trust, provide guidance, and continuously help it grow
You combine an understanding of cybersecurity in IT and OT with experience in security governance, risk management, management systems, and regulatory requirements. You are familiar with standards and frameworks such as ISO 27001, NIS2, and relevant KRITIS requirements
You communicate clearly and confidently, even at the management level; you can take a firm stance and explain cybersecurity risks concisely and in an understandable way
You do not view security as an end in itself. For you, it’s about enabling operational capability, resilience, and the secure implementation of our corporate goals. Integrity, discretion, and personal reliability are second nature to you.
Excellent German and English language skills round out your profile
Benefits
Flexibility
We’re family-friendly and down-to-earth
We put people first: Through our external partners, you’ll have access to support services for different stages of life—for example, regarding childcare, household services, or balancing caregiving and work
A 37-hour workweek with flexible working hours, a flex-time account, the option to work from home, and 30 days of vacation per year (plus New Year’s Eve and Christmas Eve off) allow you to tailor your work schedule to your individual needs
Details
Attractive compensation & benefits
Attractive compensation: Salary is based on a collective bargaining agreement
A JobRad under the deferred compensation plan can be used as an alternative to commuting to work and as a health promotion measure
Personal Development
Recharge your energy, promote your health—not with empty promises, but with concrete benefits: You can expect a variety of in-house courses, cost-sharing for sports facilities, counseling services, and health checkups by on-site company physicians
Our company cafeterias contribute to a healthy and varied diet
Modern
Work Environment
Modern work environment
Campus-style work environment: Modern equipment, ergonomic workstations, and an open-office layout make it easier for you to collaborate across teams on-site
To ensure a healthy work environment even when working from home, we provide financial support for your office equipment