The Role
Own information security and cyber compliance for UK operations, including Cyber Essentials Plus, DEF STAN 05-138, and ISO 27001 activities. Manage risk assessments, threat modeling, technical controls, supplier security, incident response, awareness training, audits, and leadership reporting. The role works closely with the CISO, IT, infrastructure, engineering, suppliers, auditors, customers, and government authorities.
Summary Generated by Built In
Help Build Europe's Hypersonic Capability
At Hypersonica, we’re redefining what’s possible in European defence technology. We exist to deliver speed, resilience, and technological independence at a pace that sets a new standard. We are a small, elite team working on problems that matter, and solving them fast.
By joining Hypersonica, you’re not stepping into a predefined role. You’re joining a talent dense environment where every individual shapes the direction of the company. Our philosophy is to hire a small number of exceptional people with broad, deep technical capability, strong judgement, and the ability to operate autonomously.
We hire for talent, not rigid boxes. This role represents a business need, but the way it evolves will be shaped by the individual. If you’ve achieved what others said was impossible, or you bring a unique combination of skills that doesn’t fit a traditional mould, we want to hear from you. The work you do here directly contributes to Europe’s technological independence.
What you'll do
- You co-own our natively ISO/IEC 27001-based ISMS: policies, Statement of Applicability, risk management, internal audits and the preparation of certification and customer audits. Because the ISMS spans Germany, the UK and Canada, and will be extended to other regions, you build one integrated control framework that serves several legal regimes at once and makes local differences explicit.
- As we take on more public-sector contracts, you bring BSI IT-Grundschutz into the ISMS for our VS-NfD scope and map it onto the existing ISO controls, so that we run one ISMS rather than two.
- You are the bridge to operational IT. Technical hardening is based on the CIS Controls and Benchmarks; you translate ISMS requirements into what IT needs to deliver and turn technical results into audit evidence. Together, we want to establish compliance as code as the counterpart to our infrastructure as code. You also support awareness, incident handling and management reporting.
Who you are
- You have several years of experience in information security management or GRC and know ISO/IEC 27001 thoroughly. You have worked with BSI IT-Grundschutz in practice and understand how it differs from a native ISO 27001 approach. You enjoy working in an international environment, communicate confidently in English and German, think in risks rather than checklists, and take ownership.
- A plus: certifications such as ISO 27001 Lead Implementer or Lead Auditor or BSI IT-Grundschutz-Praktiker or -Berater, experience in defence or the public sector, familiarity with UK security frameworks, and interest in compliance automation.
What you can expect
- A group-level role with real impact: you shape the ISMS of an international company through its certifications and into the classified domain, with direct access to the CISO and top management. You work with a modern, open-source-first and sovereign technology stack, alongside an IT team that implements the controls you define. You will find room to grow, both in technical depth and in the specifics of defence and classified-information security.
- The role requires willingness and eligibility to undergo a German security clearance (Ü2 under the SÜG).
What we offer
- A mission driven environment with the opportunity to work on one of Europe’s most consequential defence challenges, with direct impact on sovereign capability and security.
- Daily collaboration with top experts across engineering, operations, and defence, with real opportunity to learn from the best, contribute, and grow.
- High ownership and autonomy; no time tracking, no micromanagement, just clear objectives and accountability for outcomes.
- A fast paced environment where good ideas are implemented quickly, and feedback from test and flight drives real decisions.
- A culture that values clarity, integrity, and excellence, and supports people who take initiative and push boundaries responsibly.
- Competitive compensation and real share options aligned to responsibility and impact, not tenure or hierarchy.
Security and Eligibility Requirement
Due to the nature of the work we undertake, applicants must be a EU/Nato/German citizen, and be eligible for German Security Clearance.
At Hypersonica, every hire raises the bar. We are deliberately small, intensely capable, and deeply mission-driven. If this role feels like a strong fit, or if you believe you bring something exceptional that goes beyond the description, we encourage you to apply.
Hypersonica is an equal-opportunity employer and assesses candidates solely on merit, capability, and potential.
You can apply directly to this role or reach out to Nathan Sweeney, Head of Talent. We review every application and aim to respond to all candidates within two weeks, whether the answer is yes or no.
Skills Required
- Hands-on information security experience delivering cyber compliance in the defence or government supply chain
- Practical experience running Cyber Essentials or Cyber Essentials Plus certifications
- Experience working to DEF STAN 05-138 and MOD supplier cyber protection requirements
- Experience implementing or auditing an ISO 27001 ISMS
- Technical depth in cloud identity, endpoint management, and network security
- Ability to explain security clearly to engineers, leadership, and auditors
- ISO 27001 Lead Implementer or Lead Auditor qualification
- CISSP or CISM certification
- Familiarity with UK Government Security Classifications and MOD security requirements for industry
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Hypersonica is a mission-driven European defense and aerospace company that develops next-generation hypersonic systems for military and civilian applications. Founded in 2023, the company aims to equip European allies with sovereign, cost-effective hypersonic strike capabilities. By utilizing a modular architecture and rapid iteration, they significantly reduce development costs and timelines, focusing on enhancing Europe's defense autonomy and technological independence in a complex global security environment.
