• Develop and Maintain Cybersecurity Infrastructure: Implement, monitor, and refine security measures, ensuring robust protection and swift emergency response plans.

• Conduct Risk Assessments: Perform comprehensive IT and information security evaluations to identify vulnerabilities and threats.

• Enhance Risk Management Frameworks: Help create and maintain risk management policies, procedures, and frameworks aligned with industry standards and regulatory requirements.

• Monitor Risk Mitigation Efforts: Ensure mitigation strategies align with our risk appetite, reducing systemic risks to acceptable levels.

• Drive Continuous Improvement: Lead ongoing enhancements to our Information Security Management System (ISMS) and support certifications like ISO 27001, CMMC, and BSI-Grundschutz.

• Provide Guidance and Training: Support internal projects and train colleagues on cybersecurity best practices.

• Validate Security Measures: Coordinate and evaluate penetration tests, vulnerability scans, and log analyses to assess and strengthen our security systems.

• Educational Background: A degree in Information Security, Cybersecurity, Computer Science, or a related field. A Master’s degree is a plus.

• Professional Experience: Over 2 years of experience in IT risk management, information security, or a related area.

• Technical Expertise: Strong knowledge of cybersecurity infrastructure and best practices.

• Language Skills: Fluent English (B2 or higher); fluency in German is a bonus.

• Personal Attributes:

  • Enjoys both independent project work and team collaboration.

  • Comfortable representing management systems during external audits.

  • Thrives in a dynamic, fast-paced startup environment and contributes fresh ideas.

One of the following makes you stand out:

• In-depth knowledge of ISMS, particularly ISO 27001.

• Professional experience in the medical device industry.

• Familiarity with IT radiology systems like PACS/RIS or radiological data (DICOM).

• You will join an early-stage venture which is trying to have an impact on people’s life and health.
• As part of a small team of engineers, you will have the chance to become a key employee and increase your responsibilities over time.
• We implement a flexible working culture (e.g. home office).
• You’ll find a friendly working atmosphere and will be able to take part in regular fun team-building activities.
• We enrich each other’s knowledge through periodical knowledge sharing sessions.