[Hiring] Information Security Officer @Orcrist Technologies

Role Description

As Group ISB, you own the information security strategy, programme, and posture of the Vektor Group, from strategy to hands-on execution. You work in close operational partnership with the Director of Internal IT on technical controls and implementation. Your core mandate is ISO 27001 certification on the basis of BSI IT-Grundschutz, together with NIS-2 compliance:

• Gap analysis and controls implementation
• Audit readiness
• Ongoing maintenance
• Regulatory obligations arising under both frameworks

We build AI platforms for customers in the defence and government sector. Information security is a precondition for our business, not an afterthought. We are building the security organisation while the group grows. During this phase, everyone including leadership works hands-on:

• Day-to-day operational security
• Direct support for the IT team
• Tasks outside the boundaries of a traditional governance role

External consultants support the ramp-up. As the ISMS and the team mature, the balance shifts toward strategy and governance.

Qualifications

• Several years of experience as an ISB or in comparable responsibility for information security
• Proven practice with BSI IT-Grundschutz: BSI standards 200-x and the Grundschutz-Kompendium, ideally including a completed certification procedure
• Experience building or leading ISO 27001 programmes, from gap analysis to audit readiness
• Solid risk management: you assess, prioritize, and communicate risk clearly to technical and non-technical audiences
• Willingness to work hands-on during the build-up phase
• Confident interaction with executive management, auditors, and customers
• German at C1 or above, English at B2 or above

Requirements

• Certifications: IT-Grundschutz-Praktiker/-Berater, ISO 27001 Lead Implementer or Lead Auditor, CISSP, CISM
• Experience with security governance across multiple legal entities or jurisdictions
• Experience in regulated environments: defence, government, critical infrastructure; familiarity with VS-NfD, Geheimschutz, or AQAP
• Practical NIS-2 implementation experience
• Experience with sales-adjacent security processes (pre-sales, customer audits)

Benefits

• International team with colleagues across Germany and other locations.
• Startup environment with real ownership, flat hierarchies, and fast decisions.
• Competitive compensation aligned with experience and responsibility.
• Individual learning and growth opportunities beyond your role.