Information Security Officer

Who we are

The role

The day-to-day

• Conduct internal audits and assessments against ISO 27001, BSI IT-Grundschutz, and other applicable frameworks; track findings and drive remediation efforts

• Prepare and maintain security documentation, policies, and procedures in strict alignment with internal standards and compliance frameworks

• Advance our risk management processes by maintaining risk registers, conducting assessments, and executing treatment plans

• Perform thorough security assessments across internal systems to identify control gaps and implement practical improvements

• Design and execute security awareness initiatives, including targeted training and communications, to establish robust security practices across the organisation

• Collaborate with engineering, product, legal, and operations teams to seamlessly embed security requirements into daily workflows

You should apply if you

• Demonstrate hands-on experience conducting audits and assessments against ISO 27001 or BSI IT-Grundschutz within structured compliance frameworks

• Manage risk identification, assessment, and treatment processes effectively in a professional environment

• Communicate complex security requirements clearly and concisely to non-security stakeholders across engineering, product, and operations

• Design and deliver impactful security awareness initiatives that build a cohesive security culture

• Exhibit meticulous organisation, with the proven ability to manage documentation, track audit findings, and oversee remediation

• Speak and write fluent German to successfully navigate the regulatory environment and manage BSI IT-Grundschutz requirements

• Seek to advance your career in a technically complex environment where your work directly supports the protection of democratic values

Note: We operate in an industry where women, as well as other minority groups, are systematically under-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points.

Nice to Have

• Relevant professional certifications, such as ISO 27001 Lead Auditor or equivalent

• Experience operating within the defence, government, or critical infrastructure sectors

• Familiarity with additional compliance frameworks beyond ISO 27001 and BSI IT-Grundschutz, including SOC 2 or NIST

• Exposure to AI or software development environments, including an understanding of the specific security considerations for developing and deploying machine learning systems

• Experience preparing for external audits and liaising directly with third-party auditors

• Knowledge of supply chain security requirements and experience assessing third-party vendor risk

Join Helsing and work with world-leading experts in their fields 

• Helsing’s work is important. You’ll be directly contributing to the protection of democratic countries while balancing both ethical and geopolitical concerns

• The work is unique. We operate in a domain that has highly unusual technical requirements and constraints, and where robustness, safety, and ethical considerations are vital. You will face unique Engineering and AI challenges that make a meaningful impact in the world

• Our work frequently takes us right up to the state of the art in technical innovation, be it reinforcement learning, distributed systems, generative AI, or deployment infrastructure. The defence industry is entering the most exciting phase of the technological development curve. Advances in our field of world are not incremental: Helsing is part of, and often leading, historic leaps forward

• In our domain, success is a matter of order-of-magnitude improvements and novel capabilities. This means we take bets, aim high, and focus on big opportunities. Despite being a relatively young company, Helsing has already been selected for multiple significant government contracts

• We actively encourage healthy, proactive, and diverse debate internally about what we do and how we choose to do it. Teams and individual engineers are trusted (and encouraged) to practise responsible autonomy and critical thinking, and to focus on outcomes, not conformity. At Helsing you will have a say in how we (and you!) work, the opportunity to engage on what does and doesn’t work, and to take ownership of aspects of our culture that you care deeply about

What we offer

• Competitive salary and VSOP options

• Relocation support: up to €2,500 and 4 weeks temporary accommodation

• Learning: €500/£450 yearly allowance

• Health & wellness: gym membership and mental health support (Nilo.health)

• Social: regularly company events and monthly social allowances

• Enhanced parental leave: 22 weeks fully paid for primary caregivers & 6 weeks for secondary caregivers.

• Family support: 5 days of paid family emergency leave, 100% remote work option during pregnancy and phased return to work

These are the core benefits across all locations, there may be additional benefits in certain locations.

Helsing is an equal opportunities employer. We are committed to equal employment opportunity regardless of race, religion, sexual orientation, age, marital status, disability or gender identity. Please do not submit personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning your health, or data concerning your sexual orientation.