Senior GRC Engineer (Security)

The role

You will mature the Security Governance, Risk and Compliance program across multiple countries. You will translate client and national security requirements into internal requirements and maintain the ISO 27001 ISMS.

What you will do

• Translate client and national security requirements to internal requirements
• Ensure evidence of fulfilling and complying with requirements
• Support Product, Missions, PMO and Sales on client requirements
• Produce material to support accreditation and acceptance requirements
• Improve ISO 27001 ISMS including risk assessments and internal audits
• Track and operationalise NIS2, CRA and other EU product security obligations
• Prepare compliance and risk reporting for senior leadership
• Maintain information security policies, standards and documentation
• Act as a point of contact for external auditors, certification bodies and regulators

Required qualifications

• Eligible for being cleared for a Personal Security Clearance
• Citizenship or a permanent residency in the European Union
• Technical skills to interpret compliance requirements towards the product function
• Ability to discuss modern software architecture and development, deployment and release concepts
• Proven hands-on experience running ISO 27001 in a real organisation
• Working knowledge of NIS2 and CRA
• Strong stakeholder management skills
• Experience building or maintaining a risk register and running quantified risk assessments
• Ability to operate independently across multiple countries and regulatory regimes
• Awareness of emerging AI governance frameworks (ISO 42001, NIST AI Risk Management Framework, EU AI Act) and NIST frameworks

Nice to have

• Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer or Lead Auditor
• Experience in defence, space, aerospace or another regulated/sovereign-sensitive industry
• Exposure to classified information handling frameworks (EUCI, NATO equivalents, or national security clearance regimes)
• A well-rounded skillset of using language models for automation

Benefits

• Continuous professional development
• Training opportunities

Before you apply

• Employment is subject to applicable security screening (incl. SUPO, where required)
• Initial screening call with Talent Acquisition
• Technical/competency interview with the VP Product Security
• Scenario-based exercise on requirements discovery, mapping and prioritisation
• Final interview with senior stakeholders including a behavioural interview

About the company

ICEYE is the world leader in sovereign intelligence from space. They own the world's largest and most advanced SAR satellite constellation.