Junior Information Security Officer (CISO track)

2 дн. назад

NetherlandsEuropeC-levelHybrid

Junior Information Security Officer role focused on information security backbone in a defence-focused deep-tech start-up.

О компании

is a young but fast-growing deep-tech start-up with big ambitions at the frontier of autonomy, perception, and defence. Our core expertise lies in 3D vision and graphics technologies which we deploy in a dual-use context for inspection and defence. This role will focus mainly on the defence context, where we are developing software for advanced on-board UAV situational awareness in military applications. Our solutions are aimed to operate with low-cost and widely available sensors and compute. From there, we plan to develop a line-up of interconnected solutions to safeguard European safety.
Our team consists of engineers who are passionate about the technology and solutions they develop. Our office is located in the Aerospace Innovation Hub, a start-up hub on the TU Delft campus in the Faculty of Aerospace Engineering.
We work closely with top-tier partners, ranging from government agencies and prime contractors to academic research institutes and other start-ups. As a company operating in the defence domain, information security and compliance are not administrative side-tasks for us — they are a condition for doing business.

Обязанности

As Junior Information Security Officer at , you will build and grow into the information security backbone of the company, working towards taking ownership of our ABDO/ABRO compliance obligations as a defence supplier, alongside broader information security management.
This is a junior role by seniority, not by ambition: you'll be joining a small, technical, fast-moving team where you'll get real ownership quickly. You don't need to arrive with deep ABDO/ABRO-specific expertise — the underlying principles (risk assessment, access control, classification of information, physical and personnel security, incident management) overlap substantially with general information security frameworks such as ISO 27001. If you have a solid grounding in one, we can teach you the defence-specific overlay.
Over time, this role is intended to grow towards a CISO-level position as the company and its compliance obligations scale.
• Supporting and eventually owning our ABDO/ABRO compliance trajectory — coordinating the required assessments, documentation, and liaison with the relevant defence authorities and our contracting partners.
• Building out our information security management system (ISMS), using ISO 27001 principles as the backbone, and mapping where ABDO/ABRO adds defence-specific requirements on top.
• Running and maintaining risk assessments, access control policies, and classification of sensitive information across the company.
• Coordinating personnel security requirements (e.g., screening/clearance processes — VGB) in collaboration with HR and management.
• Acting as the internal point of contact for security questions from engineering, HR, and management, and translating compliance requirements into practical, workable processes for a small team.
• Staying up to date on relevant regulatory developments (ABDO/ABRO, export control, and adjacent frameworks) and flagging implications for the business early.

Условия

• Money, of course.
• 25 vacation days per year.
• Reimbursed travel expenses and a company laptop.
• (Really) flexible working hours, with the option to work from home 2 days per week (when not abroad).
• Working in an international, world-class team of engineers and entrepreneurs solving real-life problems with amazing technology.
• Real ownership and growth potential — you'll help define what this role becomes as the company scales.
• Support for relevant training/certification as you grow into the role.

Другое

Preferred starting date: ASAP
Weekly availability: Full-time (5 days/week)
Location: Aerospace Innovation Hub, Delft, the Netherlands
• A relevant educational background or demonstrable interest in information security — e.g., a degree or coursework touching on cybersecurity, IT audit, risk management, or a related field.
• Understanding of core information security principles (risk assessment, access control, incident management); familiarity with ISO 27001 is a strong plus.
• Willingness and ability to build up ABDO/ABRO-specific knowledge on the job — no prior defence-sector security clearance experience required, though it's a plus.
• Precise, structured way of working — comfortable with documentation, policy, and process, without losing sight of practical usability for a small team.
• Discretion and integrity — this role will involve access to sensitive information and, in time, likely a personal security clearance (VGB) requirement.
• Good communication skills in both Dutch and English, and the ability to explain compliance requirements to non-specialists.
• Full-time availability (40 hours per week).
• Nice to have: an entry-level certification such as ISC2 Certified in Cybersecurity (CC), or willingness to pursue CISM/CISSP as you grow into the role.
We see this role as a genuine growth track: starting from ABDO/ABRO and general information security coordination, growing towards full ownership of 's information security strategy as the company and its compliance requirements scale — a junior-to-CISO trajectory. We're open to supporting relevant further education or certification (e.g., CISM, CISSP, or a security-focused executive programme) as part of that growth.
If after reading the above you are convinced you are the right person for the job, send us some information about yourself. This can be a resume, website, portfolio, or any other source that gives us a clear impression of your background, technical skills, and hands-on experience. We will get back to you ASAP.
We’ll get back to you ASAP. If we feel you could be a fit for the position, we will share more information and request you to complete a questionnaire. After this, interviews will follow.
If at that point we believe you are the person we are looking for, we will discuss the specifics such as starting date