Group IS Security Lead – ISO 27001 & NIS-2 (Remote)

Orcrist Technologies GmbH; United States; Remote; USD 101,000 - 169,000; Full time

Benefits offered by this job

Remote-first Germany-wide

Flexible working hours

Home-office equipment budget

30 days vacation

Personal and professional development

Performance bonuses tied to objectives

Welcome goodie bag

Team gatherings and events

Meaningful public safety impact

Job summary

Orcrist Technologies GmbH is seeking a Group ISB to own the information security strategy, programme, and posture for the Vektor Group. You will drive ISO 27001 certification and NIS-2 compliance, working hands-on with IT, Legal, and leadership while coordinating with external auditors and consultants.

The role emphasizes a strong security backbone for defense and government sectors, with a focus on policy, risk, and audit readiness. German C1 and English B2 are required.

Qualifications

• Several years of experience in information security leadership (ISB or equivalent).
• Proven experience with BSI IT-Grundschutz (BSI standards 200-x and Grundschutz-Kompendium).
• Experience building or leading ISO 27001 programmes from gap analysis to audit readiness.
• Solid risk management: assess, prioritize, and communicate risk to technical and non-technical audiences.
• Willingness to work hands-on during build-up phase.
• Confident interaction with executive management, auditors, and customers.
• German at C1 or above, English at B2 or above.

Responsibilities

• Build and operate the group-wide ISMS following BSI standards 200-1/200-2/200-3; perform structure analyses and risk modelling.
• Create and maintain the security policy framework and processes at group level; coordinate company-specific additions.
• Prepare ISO 27001 certification, run internal audits, and work with external auditors.
• Implement NIS-2 obligations: reporting processes, evidence management, corrective action tracking.
• Manage risk across technical and organizational domains and report to executive management.
• Steer external consultants and service providers within the programme.
• Build and run the security awareness programme and incident response planning.
• Coordinate with Director of Internal IT and platform engineering on security interfaces.
• Support sales and customer trust processes: security questionnaires, due diligence, customer audits.
• Track regulatory requirements (EU AI Act, Cyber Resilience Act) and derive actions.

Skills

Information security

BSI IT-Grundschutz

ISO 27001 programme

Risk management

Executive communication

German (C1)

English (B2)

Job description

Orcrist Technologies GmbH is seeking a Group ISB to own the information security strategy, programme, and posture for the Vektor Group. You will drive ISO 27001 certification and NIS-2 compliance, working hands-on with IT, Legal, and leadership while coordinating with external auditors and consultants.

The role emphasizes a strong security backbone for defense and government sectors, with a focus on policy, risk, and audit readiness. German C1 and English B2 are required.