{"id":515791,"url":"https://alion.io/job/orcrist-technologies-information-security-officer","title":"Group Information Security Manager","company":{"id":9334,"name":"Orcrist Technologies","domain":"orcrist.org","url":"https://alion.io/company/orcrist-technologies","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":78,"open_postings":10,"ghost_share":0,"stale_share":0.7,"repost_share":0,"time_to_fill_p50_days":72,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["DE"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"EU AI Act","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Platform Engineering","optional":false}],"status":"live","first_seen_at":"2026-09-07T16:18:54Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-29T00:35:43Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":50},"description":"Orcrist is building a next generation data intelligence platform using cutting-edge technologies. We're handling petabyte-scale data with sub-second queries. Our product is a Kubernetes-based platform delivered as B2B SaaS or as a self-hosted on-prem solution, including air-gapped deployments. We enable customers across defense, law enforcement, and enterprise to turn mission-critical data into actionable intelligence.\nRole\nAs Group ISB, you own the information security strategy, programme, and posture of the Vektor Group, from strategy to hands-on execution. You work in close operational partnership with the Director of Internal IT on technical controls and implementation. Your core mandate is ISO 27001 certification on the basis of BSI IT-Grundschutz, together with NIS-2 compliance: from gap analysis and controls implementation through audit readiness, ongoing maintenance, and the regulatory obligations arising under both frameworks.\nWe build AI platforms for customers in the defence and government sector. Information security is a precondition for our business, not an afterthought. We are building the security organisation while the group grows. During this phase, everyone including leadership works hands-on: day-to-day operational security, direct support for the IT team, and tasks outside the boundaries of a traditional governance role. External consultants support the ramp-up. As the ISMS and the team mature, the balance shifts toward strategy and governance.\nWhat you'll do\nBuild and operate the group-wide ISMS following BSI standards 200-1/200-2/200-3: structure analysis, protection needs assessment, modelling, risk analysis\nCreate and maintain the security policy framework and processes at group level; coordinate company-specific additions\nPrepare and accompany ISO 27001 certification, run internal audits, work with external auditors\nImplement NIS-2 obligations: reporting processes, evidence management, corrective action tracking\nManage risk across technical and organizational domains, including reporting to executive management\nSteer external consultants and service providers within the running programme\nBuild and run the security awareness programme: training and sensitization\nOwn incident response planning and coordinate during incidents, together with IT, Legal, and leadership\nAssess third-party and vendor risk, run security assessments for new tools and partners\nWork closely with the Director of Internal IT (technical controls: access governance, endpoint security, identity) and with platform engineering (interface to product security)\nSupport sales and customer trust processes: security questionnaires, due diligence, customer audits\nTrack further regulatory requirements (EU AI Act, Cyber Resilience Act, among others) and derive required action\nAbout you\nSeveral years of experience as an ISB or in comparable responsibility for information security\nProven practice with BSI IT-Grundschutz: BSI standards 200-x and the Grundschutz-Kompendium, ideally including a completed certification procedure\nExperience building or leading ISO 27001 programmes, from gap analysis to audit readiness\nSolid risk management: you assess, prioritize, and communicate risk clearly to technical and non-technical audiences\nWillingness to work hands-on during the build-up phase\nConfident interaction with executive management, auditors, and customers\nGerman at C1 or above, English at B2 or above\nNice-to-haves\nCertifications: IT-Grundschutz-Praktiker/-Berater, ISO 27001 Lead Implementer or Lead Auditor, CISSP, CISM\nExperience with security governance across multiple legal entities or jurisdictions\nExperience in regulated environments: defence, government, critical infrastructure; familiarity with VS-NfD, Geheimschutz, or AQAP\nPractical NIS-2 implementation experience\nExperience with sales-adjacent security processes (pre-sales, customer audits)\nWhat we offer\nRemote-first, Germany-wide: Work from wherever you do your best work, with regular team gatherings in Berlin and other off-site locations.\nFlexibility by default: Flexible working hours help you make work fit your life.\nYour setup, your way: Get a personal home-office equipment budget to create a workspace that works for you.\n30 days of vacation: Take the time you need to recharge and come back with fresh energy.\nKeep growing: We invest in your personal and professional development.\nGet rewarded for impact: Performance bonuses are tied to agreed objectives and key results.\nA warm welcome: Every new team member gets a welcome goodie bag.\nGood people, good times: From summer and Christmas parties to regular team gatherings, we make time to celebrate together.\n A mission that matters: Work on challenges with tangible impact on public safety and national security.","description_format":"text","description_chars":4784,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"German","level":"Advanced (C1)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule","Professional development"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["C4ISR","Defense AI"],"lifecycle":[{"event":"open","at":"2026-09-07T18:57:03Z"}],"visa":[],"liveness":{"score":36,"band":"fade","label":"Fading","p_open":1,"p_active":0.475,"p_room":0.75,"age_days":50,"expected_fill_days":72,"reasons":["conf:3","stale_co","win:late"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/orcrist-technologies-information-security-officer","json_url":"https://alion.io/job/orcrist-technologies-information-security-officer.json","meta":{"generated_at":"2026-10-29T04:19:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6669,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9334},"rest":"https://alion.io/mcp/rest/get_company?id=9334"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Forcrist-technologies-information-security-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Forcrist-technologies-information-security-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Forcrist-technologies-information-security-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/orcrist-technologies-information-security-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Forcrist-technologies-information-security-officer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":515791}},{"tool":"search_jobs","arguments":{"company":"orcrist.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":515791},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}