Head of Information and Cyber Security

About the role

Onodrim is building Europe's largest defence and industrial platform by acquiring specialist manufacturers in critical defence and dual-use supply chains and investing in their growth. The Head of Information Security owns security across the whole platform, from Onodrim itself to every acquired company, which brings its own networks, IT staff and history. It is a hands-on role: you take over Onodrim's security from the CTO on day one and run it yourself, then extend it to very different sub-companies.

Key responsibilities

• Own the security programme: set strategy, standards and risk appetite, and run Onodrim's estate (identity and access, endpoint management, productivity suite and SaaS stack).
• Secure acquired companies within weeks of each deal: assess security posture, fix urgent issues and bring them onto the platform standard without disrupting production.
• Support the deal team with security and IT due diligence on acquisition targets.
• Bring OT and industrial control systems into scope: network segmentation, machine access, vendor remote access, and the gap between IT and OT teams.
• Lead incident response: detection, response and recovery, tabletop exercises, and act as the escalation point at night.
• Drive ISO 27001, NIS2 readiness and national defence-industry and classified-information requirements (e.g. BSI, facility security clearance equivalents), and support export-control compliance (ITAR/EAR, EU dual-use) on the technical side.
• Manage third-party and supply-chain risk, and run corporate IT for the top company (device lifecycle, joiner/mover/leaver, SaaS licensing, first-line support).
• Decide what gets consolidated across acquisitions and hire and manage security and IT staff, MSSPs, MDR providers and auditors.
• Write policies, train staff and design controls that fit a 20-person company and a 500-person manufacturer.

Required profile

• 5+ years in information security, with at least 2 in a programme-owning role (Head of Security, CISO or deputy) or equivalent in government, military or a defence contractor.
• Track record of leading incident response, including at least one serious incident explained end to end.
• Working knowledge of the European regulatory landscape for defence and critical industry (NIS2, ISO 27001, GDPR, export control, classified information).
• Experience taking a company through ISO 27001 or an equivalent certification from scratch.
• Experience running device fleets, SaaS administration and onboarding, and comfort with build vs. buy vs. outsource decisions.
• Clear, direct communication in English, able to present risk to a board and explain controls to a plant administrator.
• Willingness to travel regularly across Europe, with extended time on site after each acquisition.
• Right to work in the UK, Switzerland or the EU, and eligibility for a national security clearance in at least one operating country.

Required skills

• Modern cloud-native stack: enterprise identity provider, Apple and Windows endpoint management, cloud productivity-suite administration, SaaS security.
• On-premise and industrial environments: Windows domains, legacy ERP, shop-floor networks, OT/ICS.
• Nice to have: existing security clearance, defence contractor or classified-material experience, M&A security experience, OT security (IEC 62443, Purdue model), security engineering background, and certifications such as CISSP, CISM, ISO 27001 Lead Implementer or GIAC.