Director Physical Security

Orcrist is building a next generation data intelligence platform using cutting-edge technologies. We're handling petabyte-scale data with sub-second queries. Our product (OIP) is a Kubernetes‑based platform delivered as B2B SaaS or as a self‑hosted/on‑prem solution, including air‑gapped deployments.

The Director Physical Security owns everything in security that isn't IT/cyber: people, sites, material, and processes. The role builds and runs the group's physical and organizational security program largely from scratch, in an environment where classified work, sensitive hardware, and regulatory scrutiny are part of daily business.

• Define and own the group-wide physical security strategy across all sites and entities, scaling it with company growth.
• Design, implement, and operate physical access control, perimeter protection, intrusion detection, CCTV, alarm management, and visitor/contractor management.
• Build and maintain the organizational security framework for classified work — protection and handling of Verschlusssachen (VS), establishment of Sicherheitsbereiche and secure storage, in line with the Geheimschutzhandbuch.
• Act as the operational interface to German authorities on industrial security (Geheimschutzbetreuung via BMWK) and coordinate closely with the Sicherheitsbevollmächtigte(r); take on or support the SiBe function as needed.
• Manage the physical dimension of personnel security: clearance-linked access, escorting rules, badge lifecycle, and onboarding/offboarding from a security standpoint.
• Run crisis management, emergency response, evacuation, and business continuity planning for physical incidents.
• Ensure physical security across the supply chain and logistics — secure transport, storage, and handling of sensitive hardware and prototypes.
• Secure company events, trade shows, and customer/site visits.
• Manage external security vendors (guarding, alarm/CCTV, locksmithing, security tech) including budgets and SLAs.
• Develop policies, run audits, drills, and training; drive a security-awareness culture across a remote-first workforce.
• Own the physical/organizational side of the insider-threat program, in coordination with IT Security and People & Culture.
• Ensure compliance with the relevant defense and regulatory frameworks (SÜG, Geheimschutzhandbuch, NATO/EU classified standards, KRITIS/BSI where applicable, ITAR/EAR physical controls).

• Several years leading physical/corporate security, ideally in defense, aerospace, critical infrastructure, or a comparably regulated and security‑sensitive environment.
• Proven experience building a physical security program greenfield — not only maintaining a mature one.
• Hands‑on expertise with access control, CCTV, intrusion detection, and alarm systems, including the relevant standards.
• Crisis/emergency management and business continuity experience.
• Comfortable operating in a remote‑first, multi‑site setup with frequent travel between locations.
• Fluent German and strong English.
• Around 8–12+ years in security overall, with several years in a program‑owning or leadership capacity, and a clear track record in regulated or high‑sensitivity environments. Startup or scale‑up experience is a strong plus given the build‑from‑scratch nature of the role.

• International team with colleagues across Germany and other locations.
• Startup environment with real ownership, flat hierarchies, and fast decisions.
• Competitive compensation aligned with experience and responsibility.
• Individual learning and growth opportunities beyond your role.