Information Security Officer

Who we are Helsing is a defence AI company. Our mission is to protect our democracies. We aim to achieve technological leadership, so that open societies can continue to make sovereign decisions and control their ethical standards. As democracies, we believe we have a special responsibility to be thoughtful about the development and deployment of powerful technologies like AI. We take this responsibility seriously. We are an ambitious and committed team of engineers, AI specialists and customer-facing programme managers. We are looking for mission-driven people to join our European teams – and apply their skills to solve the most complex and impactful problems. We embrace an open and transparent culture that welcomes healthy debates on the use of technology in defence, its benefits, and its ethical implications. The role Helsing builds AI to protect our democracies, and strict security is fundamental to our operations. As an Information Security Officer, you will actively maintain and advance our security posture across compliance, risk management, and security awareness. This cross-functional role requires direct collaboration with engineering, product, legal, and operational teams to solve complex challenges. You will apply your expertise in a technically demanding, highly regulated environment where your work delivers immediate and meaningful impact. The day-to-day Conduct internal audits and assessments against ISO 27001, BSI IT-Grundschutz, and other applicable frameworks; track findings and drive remediation efforts Prepare and maintain security documentation, policies, and procedures in strict alignment with internal standards and compliance frameworks Advance our risk management processes by maintaining risk registers, conducting assessments, and executing treatment plans Perform thorough security assessments across internal systems to identify control gaps and implement practical improvements Design and execute security awareness initiatives, including targeted training and communications, to establish robust security practices across the organisation Collaborate with engineering, product, legal, and operations teams to seamlessly embed security requirements into daily workflows You should apply if you Demonstrate hands-on experience conducting audits and assessments against ISO 27001 or BSI IT-Grundschutz within structured compliance frameworks Manage risk identification, assessment, and treatment processes effectively in a professional environment Communicate complex security requirements clearly and concisely to non-security stakeholders across engineering, product, and operations Design and deliver impactful security awareness initiatives that build a cohesive security culture Exhibit meticulous organisation, with the proven ability to manage documentation, track audit findings, and oversee remediation Speak and write fluent German to successfully navigate the regulatory environment and manage BSI IT-Grundschutz requirements Seek to advance your career in a technically complex environment where your work directly supports the protection of democratic values Note: We operate in an industry where women, as well as other minority groups, are systematically under-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points. Nice to Have Relevant professional certifications, such as ISO 27001 Lead Auditor or equivalent Experience operating within the defence, government, or critical infrastructure sectors Familiarity with additional compliance frameworks beyond ISO 27001 and BSI IT-Grundschutz, including SOC 2 or NIST Exposure to AI or software development environments, including an understanding of the specific security considerations for developing and deploying machine learning systems Experience preparing for external audits and liaising directly with third-party auditors Knowledge of supply chain security requirements an