Junior Information Security Officer (CISO track)

Job description

# Junior Information Security Officer (CISO track) **Preferred starting date:** ASAP **Weekly availability:** Full-time (5 days/week) **Location:** Aerospace Innovation Hub, Delft, the Netherlands # About the company Fiducial is a young but fast-growing deep-tech start-up with big ambitions at the frontier of autonomy, perception, and defence. Our core expertise lies in 3D vision and graphics technologies which we deploy in a dual-use context for inspection and defence. This role will focus mainly on the defence context, where we are developing software for advanced on-board UAV situational awareness in military applications. Our solutions are aimed to operate with low-cost and widely available sensors and compute. From there, we plan to develop a line-up of interconnected solutions to safeguard European safety. Our team consists of engineers who are passionate about the technology and solutions they develop. Our office is located in the Aerospace Innovation Hub, a start-up hub on the TU Delft campus in the Faculty of Aerospace Engineering. We work closely with top-tier partners, ranging from government agencies and prime contractors to academic research institutes and other start-ups. As a company operating in the defence domain, information security and compliance are not administrative side-tasks for us — they are a condition for doing business. # Your role As **Junior Information Security Officer** at Fiducial, you will build and grow into the information security backbone of the company, working towards taking ownership of our ABDO/ABRO compliance obligations as a defence supplier, alongside broader information security management. This is a junior role by seniority, not by ambition: you'll be joining a small, technical, fast-moving team where you'll get real ownership quickly. You don't need to arrive with deep ABDO/ABRO-specific expertise — the underlying principles (risk assessment, access control, classification of information, physical and personnel security, incident management) overlap substantially with general information security frameworks such as ISO 27001. If you have a solid grounding in one, we can teach you the defence-specific overlay. Over time, this role is intended to grow towards a CISO-level position as the company and its compliance obligations scale. # Your responsibilities will include • Supporting and eventually owning our ABDO/ABRO compliance trajectory — coordinating the required assessments, documentation, and liaison with the relevant defence authorities and our contracting partners. • Building out our information security management system (ISMS), using ISO 27001 principles as the backbone, and mapping where ABDO/ABRO adds defence-specific requirements on top. • Running and maintaining risk assessments, access control policies, and classification of sensitive information across the company. • Coordinating personnel security requirements (e.g., screening/clearance processes — VGB) in collaboration with HR and management. • Acting as the internal point of contact for security questions from engineering, HR, and management, and translating compliance requirements into practical, workable processes for a small team. • Staying up to date on relevant regulatory developments (ABDO/ABRO, export control, and adjacent frameworks) and flagging implications for the business early. # What we expect from you • A relevant educational background or demonstrable interest in information security — e.g., a degree or coursework touching on cybersecurity, IT audit, risk management, or a related field. • Understanding of core information security principles (risk assessment, access control, incident management); familiarity with ISO 27001 is a strong plus. • Willingness and ability to build up ABDO/ABRO-specific knowledge on the job — no prior defence-sector security clearance experience required, though it's a plus. • Precise, structured way of working — comfortable with documentation, policy, and process, without losing sight of practical usability for a small team. • Discretion and integrity — this role will involve access to sensitive information and, in time, likely a personal security clearance (VGB) requirement. • Good communication skills in both Dutch and English, and the ability to explain compliance requirements to non-specialists. • Full-time availability (40 hours per week). • Nice to have: an entry-level certification such as ISC2 Certified in Cybersecurity (CC), or willingness to pursue CISM/CISSP as you grow into the role. # Growth path We see this role as a genuine growth track: starting from ABDO/ABRO and general information security coordination, growing towards full ownership of Fiducial's information security strategy as the company and its compliance requirements scale — a junior-to-CISO trajectory. We're open to supporting relevant further education or certification (e.g., CISM, CISSP, or a security-focused executive programme) as part of that growth. # What we offer • Money, of course. • 25 vacation days per year. • Reimbursed travel expenses and a company laptop. • (Really) flexible working hours, with the option to work from home 2 days per week (when not abroad). • Working in an international, world-class team of engineers and entrepreneurs solving real-life problems with amazing technology. • Real ownership and growth potential — you'll help define what this role becomes as the company scales. • Support for relevant training/certification as you grow into the role. # **The application procedure** - If after reading the above you are convinced you are the right person for the job, send us some information about yourself. This can be a resume, website, portfolio, or any other source that gives us a clear impression of your background, technical skills, and hands-on experience. We will get back to you ASAP. - We’ll get back to you ASAP. If we feel you could be a fit for the position, we will share more information and request you to complete a questionnaire. After this, interviews will follow. - If at that point we believe you are the person we are looking for, we will discuss the specifics such as starting date **Welcome to the team!**