EA
Information Security Manager:in
enercity AG
Hannover, Lower Saxony, DE
enercity AG
enercity AG is one of Germany's ten largest energy service providers, supplying roughly one million people with electricity, heat, natural gas, and drinking water. The company reported revenue of €9.2 billion in 2023 and operates as a market leader in Hannover. Its technical footprint spans renewable energy generation, district heating (~625 MW thermal capacity), seven biogas production plants, over 1,100 decentralized heating and cooling systems, e-mobility charging infrastructure, fiber optic networks, and digital services including smart-home platforms. For cybersecurity professionals, the threat model here is critical infrastructure at scale. The attack surface isn't abstract: it's OT/IT convergence across energy distribution networks, smart grid components, IoT-enabled heating systems, EV charging endpoints, and telecom infrastructure. The company is actively pursuing climate neutrality by 2040, which means rapid digitalization of legacy energy systems - a transition that historically introduces security debt faster than teams can remediate it. The operational reality involves defending a utility that must maintain uptime across electricity, gas, water, and heat delivery while integrating new digital services and decentralized energy assets. This isn't a tech company that happens to touch infrastructure; it's an infrastructure company that is increasingly software-defined. Security teams working here deal with the full spectrum: industrial control systems, customer-facing digital platforms, SCADA environments, and the network layers connecting them all.
enercity AG is one of Germany's ten largest energy service providers, supplying roughly one million people with electricity, heat, natural gas, and drinking water. The company reported revenue of €9.2 billion in 2023 and operates as a market leader in Hannover. Its technical footprint spans renewable energy generation, district heating (~625 MW thermal capacity), seven biogas production plants, over 1,100 decentralized heating and cooling systems, e-mobility charging infrastructure, fiber optic networks, and digital services including smart-home platforms.
For cybersecurity professionals, the threat model here is critical infrastructure at scale. The attack surface isn't abstract: it's OT/IT convergence across energy distribution networks, smart grid components, IoT-enabled heating systems, EV charging endpoints, and telecom infrastructure. The company is actively pursuing climate neutrality by 2040, which means rapid digitalization of legacy energy systems - a transition that historically introduces security debt faster than teams can remediate it.
The operational reality involves defending a utility that must maintain uptime across electricity, gas, water, and heat delivery while integrating new digital services and decentralized energy assets. This isn't a tech company that happens to touch infrastructure; it's an infrastructure company that is increasingly software-defined. Security teams working here deal with the full spectrum: industrial control systems, customer-facing digital platforms, SCADA environments, and the network layers connecting them all.