About the role
Your mission
Servus und hallo bei uns hier in Sungrow! We're thrilled to introduce a key role at the crossroads of cutting-edge energy technology and European cybersecurity regulation: the Senior Cybersecurity Manager Utility Products & Services. Curious what this is all about? Let's dive right in:
* You are the go-to cybersecurity contact for Utility PV and ESS products and OT service activities, working closely with Product Management, Engineering, Service, Sales, Operations, the EU Cybersecurity & Data Protection Committee and HQ. * You screen European regulations, standards and customer requirements such as NIS2, KRITIS/BSIG, CRA, IEC 62443, RED/EN 18031 and ISO/IEC 27001, and turn them into clear input for products, services and roadmaps. * You review security architectures based on IEC 62443 principles, from zones and conduits to segmentation, industrial DMZs, hardening and secure remote access, and you make sure RFQ, RFI, RFP and customer assessment responses are accurate, evidence-based and approved. * You build, maintain and monitor the cybersecurity governance framework for OT services such as commissioning, remote diagnostics, maintenance, firmware updates and remote O&M on critical or NIS2-affected infrastructure. * You make sure incidents, security-relevant changes and vulnerabilities follow clear escalation and documentation paths, and you keep standardized security responses and lessons learned up to date. * You coordinate audits, certifications, customer due diligence and penetration tests with audit-ready evidence, and you represent Sungrow in industry forums, working groups and customer events.
Your profile
All right, all right, that was intriguing, wasn't it? Now, to fit this role and be happy in it for a long time, your ideal background should look a lot like this:
* You hold a university degree in cybersecurity, IT, electrical or automation engineering, or a comparable discipline. * You bring at least five years of professional experience, including substantial work in product, OT or industrial cybersecurity. * You understand Utility PV and ESS system architectures, including the interfaces between field devices, controllers, EMS, PPC, SCADA, monitoring platforms and external networks. * You have hands-on knowledge of IEC 62443, IT/OT network architectures, segmentation, industrial DMZs, firewalls, secure remote access, MFA, jump servers, vulnerability management and secure product development. * You know the relevant regulatory landscape (NIS2, KRITIS/BSIG, CRA, RED/EN 18031, ISO/IEC 27001) and can translate it into actionable controls for products, services and processes. * You have supported audits, security assessments, penetration tests, customer due diligence and RFQs, and you enjoy working across teams, customers and international HQ colleagues. * You work in a structured, analytical and implementation-focused way, with strong stakeholder management and communication skills, and you have experience representing organizations in industry forums or regulatory discussions. * You speak German and English at C1 level. Certifications in IEC 62443, OT security or information security management are a plus.
Why us?
* Shape the cybersecurity standards of utility-scale PV and energy storage solutions that help power the green energy transition across Europe. * Work at the intersection of product, service and regulation, with real influence on how security is built into our products and OT service operations. * Join a collaborative, international team, with close links to our Munich HQ, the EU Cybersecurity & Data Protection Committee and global product and engineering teams. * Grow your expertise on topics that matter now, from NIS2 and the CRA to IEC 62443, in a company at the forefront of inverters, storage and greentech. * Be a visible voice for Sungrow in industry forums and working groups, and build your network in the European energy and cybersecurity community.