Group Information Security Lead - Remote-First & Impactful Growth

orcristtechnologies; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Remote-first across Europe

Home-office budget

30 days vacation

Performance bonuses

Growth and team events

Job summary

orcristtechnologies is seeking a Group Information Security Officer to lead security strategy and hands-on efforts during the build-up phase, then transition to governance as the program matures. The role spans risk analysis, compliance with BSI IT-Grundschutz, and aligning processes for ISO 27001 readiness.

The incumbent will drive a group-wide ISMS, manage vendor risk, and coordinate incident response while ensuring regulatory alignment with NIS-2, EU AI Act, and Cyber Resilience Act.

Qualifications

• Experience as an Information Security Officer or similar role.
• Strong knowledge of BSI IT-Grundschutz (200-x standards) and Grundschutz Compendium.
• Track record in ISO 27001 programme development and audits.
• Strong risk management skills; able to communicate to technical and non-technical stakeholders.
• Willingness to be hands-on during build phases in addition to governance.
• German at C1+ and English at B2+.

Responsibilities

• Build and evolve a group-wide ISMS aligned with BSI IT-Grundschutz; perform analysis, protection needs assessment, modelling and risk analysis.
• Prepare and steer ISO 27001 certification, run internal audits, and coordinate external auditors.
• Translate NIS-2 obligations into operational processes, including reporting and remediation tracking.
• Own the group security policy and process framework; coordinate entity-specific addenda.
• Manage third-party and vendor risk, including security assessments for new tools and providers.
• Plan and evolve incident response with IT, legal, and leadership during incidents.
• Create a security awareness programme with training and ongoing sensitisation.
• Monitor regulatory regimes like EU AI Act and Cyber Resilience Act and convert into actions.

Skills

Risk management

Hands-on security

German language (C1)

English language (B2)

ISO 27001 programmes

Education

IT-Grundschutz certification cycle completed

Job description

orcristtechnologies is seeking a Group Information Security Officer to lead security strategy and hands-on efforts during the build-up phase, then transition to governance as the program matures. The role spans risk analysis, compliance with BSI IT-Grundschutz, and aligning processes for ISO 27001 readiness.

The incumbent will drive a group-wide ISMS, manage vendor risk, and coordinate incident response while ensuring regulatory alignment with NIS-2, EU AI Act, and Cyber Resilience Act.