SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Hypersonica is building Europe's hypersonic defence capability and seeking an experienced Information Security Officer to own day-to-day information security and cyber compliance for UK operations. You will work closely with the CISO and wider group security function in a small, elite, mission-driven team.
Key responsibilities include:
- Lead the annual Cyber Essentials Plus renewal process: define scope, identify and remediate gaps, gather evidence, and coordinate with the certification body through assessment.
- Prepare the company to meet DEF STAN 05-138 at higher cyber risk levels, including gap analysis, prioritised roadmap development, control implementation, and evidence building for MOD supplier cyber risk assessments.
- Maintain and enhance the ISO 27001 Information Security Management System (ISMS), including risk assessments, Statement of Applicability, policies, internal audits, and management reviews.
- Conduct information security risk management and threat modelling; translate findings into clear business priorities.
- Collaborate with IT and infrastructure teams on technical controls: identity and access management, endpoint hardening, vulnerability management, logging and monitoring, backup and recovery.
- Manage supplier and subcontractor security: flow contractual cyber requirements downstream and assess their security posture.
- Own the incident response plan, conduct exercises, and coordinate response and reporting to customers and authorities during incidents.
- Deliver security awareness training tailored to a fast-moving engineering organisation.
- Report security posture, risks, and compliance status to leadership in clear, actionable terms.
Hypersonica values mission-driven work with direct impact on European sovereign capability, high autonomy, fast execution, and a culture of clarity and integrity. The company offers competitive compensation and real share options aligned to responsibility and impact.
Requirements:
- Hands-on information security professional with experience delivering cyber compliance in the defence or government supply chain.
- Practical experience running Cyber Essentials / Cyber Essentials Plus certifications and working to DEF STAN 05-138 and MOD supplier cyber protection requirements.
- Solid experience implementing or auditing an ISO 27001 ISMS.
- Lead Implementer or Lead Auditor qualification, or certifications such as CISSP or CISM, preferred.
- Technical depth in cloud identity, endpoint management, and network security to evaluate controls in practice.
- Familiarity with UK Government Security Classifications and MOD security requirements for industry is a strong advantage.
- Ability to communicate security clearly and pragmatically to engineers, leadership, and auditors.
