Student​/Trainee​/Apprenticeship - Student employee - Part time

We are seeking a motivated Cybersecurity Working Student (all genders) to support our ongoing ISO 27001 surveillance audit preparation and security governance initiatives. Working directly with our CISO and Security Engineer, you'll play a crucial role in maintaining and enhancing our information security management system (ISMS).

This is a part-time remote position (16‑20 hours/week) for an initial 3‑month period with potential for extension based on performance and mutual interest.

• Currently enrolled in a master's program or advanced bachelor’s program (ideally in Cybersecurity, Information Security, Risk Management, or related field)
• Strong interest and foundational knowledge in GRC (Governance, Risk & Compliance) and security auditing
• Understanding of ISO 27001 framework and information security principles
• Excellent written and verbal communication skills in English (German is a plus)
• Strong analytical and documentation skills with attention to detail
• Self‑motivated and able to work independently in a remote environment
• Available for at least 16 hours per week

• Familiarity with NIST CSF 2.0 and NIST 800‑53 frameworks
• Experience with GRC platforms (Vanta experience is a strong plus)
• Prior exposure to security audit processes or compliance work
• Basic understanding of information security technical controls
• Interest in cybersecurity operations in high‑threat environments

• Support preparation for ISO 27001 surveillance audit by maintaining and updating security documentation
• Assist in gap analysis and remediation planning for identified control deficiencies
• Design and document technical security controls (implementation handled by IT team)
• Review and update information security policies, procedures, and work instructions
• Support risk assessment activities and maintain the risk register
• Assist with evidence collection and documentation for compliance requirements
• Support the CISO in reporting and metrics preparation
• Help maintain our GRC platform (Vanta) and related documentation

• Direct mentorship from an experienced CISO and a Security Engineer
• Hands‑on experience in real‑world ISO 27001 audit preparation
• Insight into security operations in challenging, hostile environments
• Flexible remote work arrangement
• Exposure to multiple security frameworks and standards
• Potential for extension and career development within the company
• Dynamic startup culture with meaningful impact

Does this sound like you? Then let’s talk!