Information Security Officer – Governance, Risk & Compliance

📋 Description Own and continuously improve ICEYE's ISO 27001 ISMS, including risk assessments, the risk register Track and operationalise NIS2 obligations across ICEYE's in-scope entities with policies, controls Assess CRA and other EU product-security regulation against ICEYE's products and close gaps before Maintain cross-jurisdiction compliance view (NIST, ISO 27001, NIS2, CRA, Finland, Germany, Spain Run third-party/vendor security risk assessments and support due diligence and security Provide clear compliance/risk reporting to senior leadership, including status vs certifications 🎯 Requirements Hands-on ISO 27001 experience (implementation, internal audit, or certification maintenance). Knowledge of NIS2 and translating obligations into controls/reporting. Familiarity with NIST frameworks (CSF, 800-53) mapping to ISO 27001/standards. Aware of CRA and implications for digital products. Experience building/maintaining risk registers and structured risk assessments. Strong stakeholder management to influence engineering, legal and leadership without authority. 🎁 Benefits Benefits vary by location; details confirmed during process.