Auditor Jobs in Munich.
All active Auditor roles based in Munich.
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
Who we are
Helsing is a defence AI company. Our mission is to protect our democracies. We aim to achieve technological leadership, so that open societies can continue to make sovereign decisions and control their ethical standards.
As democracies, we believe we have a special responsibility to be thoughtful about the development and deployment of powerful technologies like AI. We take this responsibility seriously.
We are an ambitious and committed team of engineers, AI specialists and customer-facing programme managers. We are looking for mission-driven people to join our European teams – and apply their skills to solve the most complex and impactful problems. We embrace an open and transparent culture that welcomes healthy debates on the use of technology in defence, its benefits, and its ethical implications.
The role
This is a rare opportunity to play a pivotal role at the intersection of cutting- edge defence technology and classified information security, working on some of the most sensitive and strategically significant programs in Europe.
You will take ownership of a live, scaling ISMS — helping to export and embed ISO 27001 and BSI IT-Grundschutz frameworks across multiple countries and entities — while simultaneously contributing to the build- out of a NATO Classified Infrastructure and a next-generation Cyber SOC.
No two days will look the same: from consulting delivery teams on security concepts and driving audit readiness, to shaping incident management procedures across a rapidly growing international organisation.
If you thrive in high -tempo, high -stakes environments and want your work to genuinely matter at a national and alliance level, this role was built for you.
The day-to-day
- Take ownership of the day-to-day management and continuous improvement of the ISMS, ensuring frameworks remain audit- ready and aligned with ISO 27001 and BSI IT-Grundschutz requirements across Germany and international entities including the UK, France, and beyond.
- Act as a trusted security advisor to delivery teams across a portfolio of high-priority defence programs, consulting on the implementation and documentation of security concepts and ensuring compliance with VS-NfD operational requirements.
- Drive the planning, coordination, and execution of internal and external audits, as well as penetration testing activities, managing findings through to resolution and maintaining a culture of continuous security improvement.
- Contribute directly to the design and establishment of a foundational NATO Classified Infrastructure, navigating the complex compliance and accreditation requirements this entails alongside existing national commitments.
- Support the build-out of the Cyber SOC, helping to define processes, tooling, and operational procedures that will form the backbone of the organisation's detection and response capability.
- Develop, implement, and refine Incident Management procedures, ensuring the organisation is prepared to respond swiftly and effectively to security events across classified and unclassified environments.
- Participate in on-call rotations with a minimum commitment of one week per month, providing out-of-hours security support and incident response coverage as the organisation scales across multiple international locations.
You should apply if you
- Have 2–4 years of hands-on experience in Information Security or IT Security within NATO, EU, or German national classified environments, and are ready to take that expertise to the next level in a fast-moving, high-stakes setting.
- Hold expert-level knowledge of ISO 27001 and BSI IT-Grundschutz and have practical experience implementing, managing, or auditing these frameworks — not just understanding them in theory.
- Are deeply familiar with VS-IT systems, accreditation processes, and the compliance demands of classified networks, and can hit the ground running without extensive onboarding.
- Thrive in environments where no two days are the same — equally comfortable advising engineers on security concepts in the morning and preparing audit documentation in the afternoon.
- Have a solid grasp of core security technologies including SIEM, PKI, IDS/IPS, and cryptographic systems, and understand how these operate within classified and defence - grade environments.
- Are excited by the prospect of building something — whether that is a Cyber SOC, a NATO infrastructure, or an internationally scalable ISMS — and want to leave a tangible mark on an organisation at a defining moment in its growth.
- Hold an active German security clearance at Ü2/Ü3 level, or are fully eligible and willing to undergo formal vetting in accordance with the SÜG, and understand that operating in this space comes with a responsibility that you take seriously.
Note: We operate in an industry where women, as well as other minority groups, are systematically under-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points.
Nice to Have
- Relevant industry certifications such as ISO 27001 Lead Auditor or Lead Implementer, or BSI-certified IT-Grundschutz Praktiker.
- Prior experience with NATO Security Policy frameworks and the accreditation requirements associated with NATO Classified Infrastructure, including familiarity with NATO CIS environments.
- Exposure to EU security regulations and cross-border compliance requirements, particularly in the context of exporting classified security frameworks to international entities.
- Experience supporting or contributing to the build-out of a Cyber SOC, including familiarity with SOC tooling, process design, and operational workflows.
- Knowledge of TEMPEST standards and physical security requirements as they relate to classified IT environments.
- Familiarity with NIS2 requirements and the practical steps involved in aligning an organisation's security posture with the directive's obligations.
- Professional working proficiency in both German and English, enabling effective collaboration across international teams, auditors, and regulatory bodies without reliance on translation support.
Join Helsing and work with world-leading experts in their fields
-
Helsing’s work is important. You’ll be directly contributing to the protection of democratic countries while balancing both ethical and geopolitical concerns
-
The work is unique. We operate in a domain that has highly unusual technical requirements and constraints, and where robustness, safety, and ethical considerations are vital. You will face unique Engineering and AI challenges that make a meaningful impact in the world
-
Our work frequently takes us right up to the state of the art in technical innovation, be it reinforcement learning, distributed systems, generative AI, or deployment infrastructure. The defence industry is entering the most exciting phase of the technological development curve. Advances in our field of world are not incremental: Helsing is part of, and often leading, historic leaps forward
-
In our domain, success is a matter of order-of-magnitude improvements and novel capabilities. This means we take bets, aim high, and focus on big opportunities. Despite being a relatively young company, Helsing has already been selected for multiple significant government contracts
-
We actively encourage healthy, proactive, and diverse debate internally about what we do and how we choose to do it. Teams and individual engineers are trusted (and encouraged) to practise responsible autonomy and critical thinking, and to focus on outcomes, not conformity. At Helsing you will have a say in how we (and you!) work, the opportunity to engage on what does and doesn’t work, and to take ownership of aspects of our culture that you care deeply about
What we offer
-
Competitive salary and VSOP options
-
Relocation support: up to €2,500 and 4 weeks temporary accommodation
-
Learning: €500/£450 yearly allowance
-
Health & wellness: gym membership and mental health support (Nilo.health)
-
Social: regularly company events and monthly social allowances
-
Enhanced parental leave: 22 weeks fully paid for primary caregivers & 6 weeks for secondary caregivers.
-
Family support: 5 days of paid family emergency leave, 100% remote work option during pregnancy and phased return to work
These are the core benefits across all locations, there may be additional benefits in certain locations.
Helsing is an equal opportunities employer. We are committed to equal employment opportunity regardless of race, religion, sexual orientation, age, marital status, disability or gender identity. Please do not submit personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning your health, or data concerning your sexual orientation.
Ready to apply?
Apply to Helsing
Who we are
Helsing is a defence AI company. Our mission is to protect our democracies. We aim to achieve technological leadership, so that open societies can continue to make sovereign decisions and control their ethical standards.
As democracies, we believe we have a special responsibility to be thoughtful about the development and deployment of powerful technologies like AI. We take this responsibility seriously.
We are an ambitious and committed team of engineers, AI specialists and customer-facing programme managers. We are looking for mission-driven people to join our European teams – and apply their skills to solve the most complex and impactful problems. We embrace an open and transparent culture that welcomes healthy debates on the use of technology in defence, its benefits, and its ethical implications.
The role
The day-to-day
-
Conduct internal audits and assessments against ISO 27001, BSI IT-Grundschutz, and other applicable frameworks; track findings and drive remediation efforts
-
Prepare and maintain security documentation, policies, and procedures in strict alignment with internal standards and compliance frameworks
-
Advance our risk management processes by maintaining risk registers, conducting assessments, and executing treatment plans
-
Perform thorough security assessments across internal systems to identify control gaps and implement practical improvements
-
Design and execute security awareness initiatives, including targeted training and communications, to establish robust security practices across the organisation
-
Collaborate with engineering, product, legal, and operations teams to seamlessly embed security requirements into daily workflows
You should apply if you
-
Demonstrate hands-on experience conducting audits and assessments against ISO 27001 or BSI IT-Grundschutz within structured compliance frameworks
-
Manage risk identification, assessment, and treatment processes effectively in a professional environment
-
Communicate complex security requirements clearly and concisely to non-security stakeholders across engineering, product, and operations
-
Design and deliver impactful security awareness initiatives that build a cohesive security culture
-
Exhibit meticulous organisation, with the proven ability to manage documentation, track audit findings, and oversee remediation
-
Speak and write fluent German to successfully navigate the regulatory environment and manage BSI IT-Grundschutz requirements
-
Seek to advance your career in a technically complex environment where your work directly supports the protection of democratic values
Note: We operate in an industry where women, as well as other minority groups, are systematically under-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points.
Nice to Have
-
Relevant professional certifications, such as ISO 27001 Lead Auditor or equivalent
-
Experience operating within the defence, government, or critical infrastructure sectors
-
Familiarity with additional compliance frameworks beyond ISO 27001 and BSI IT-Grundschutz, including SOC 2 or NIST
-
Exposure to AI or software development environments, including an understanding of the specific security considerations for developing and deploying machine learning systems
-
Experience preparing for external audits and liaising directly with third-party auditors
-
Knowledge of supply chain security requirements and experience assessing third-party vendor risk
Join Helsing and work with world-leading experts in their fields
-
Helsing’s work is important. You’ll be directly contributing to the protection of democratic countries while balancing both ethical and geopolitical concerns
-
The work is unique. We operate in a domain that has highly unusual technical requirements and constraints, and where robustness, safety, and ethical considerations are vital. You will face unique Engineering and AI challenges that make a meaningful impact in the world
-
Our work frequently takes us right up to the state of the art in technical innovation, be it reinforcement learning, distributed systems, generative AI, or deployment infrastructure. The defence industry is entering the most exciting phase of the technological development curve. Advances in our field of world are not incremental: Helsing is part of, and often leading, historic leaps forward
-
In our domain, success is a matter of order-of-magnitude improvements and novel capabilities. This means we take bets, aim high, and focus on big opportunities. Despite being a relatively young company, Helsing has already been selected for multiple significant government contracts
-
We actively encourage healthy, proactive, and diverse debate internally about what we do and how we choose to do it. Teams and individual engineers are trusted (and encouraged) to practise responsible autonomy and critical thinking, and to focus on outcomes, not conformity. At Helsing you will have a say in how we (and you!) work, the opportunity to engage on what does and doesn’t work, and to take ownership of aspects of our culture that you care deeply about
What we offer
-
Competitive salary and VSOP options
-
Relocation support: up to €2,500 and 4 weeks temporary accommodation
-
Learning: €500/£450 yearly allowance
-
Health & wellness: gym membership and mental health support (Nilo.health)
-
Social: regularly company events and monthly social allowances
-
Enhanced parental leave: 22 weeks fully paid for primary caregivers & 6 weeks for secondary caregivers.
-
Family support: 5 days of paid family emergency leave, 100% remote work option during pregnancy and phased return to work
These are the core benefits across all locations, there may be additional benefits in certain locations.
Helsing is an equal opportunities employer. We are committed to equal employment opportunity regardless of race, religion, sexual orientation, age, marital status, disability or gender identity. Please do not submit personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning your health, or data concerning your sexual orientation.
Ready to apply?
Apply to Helsing