General Cherry is a Ukrainian defence-tech company that designs and mass-produces advanced unmanned aerial vehicles (UAVs), including FPV drones and interceptor drones for counter-air defense. All of our products are developed jointly with the military and tailored to their operational needs.
We are looking for an Information Security Specialist to lead our ISO 27001 certification process and take full ownership of the company’s cybersecurity risk management and compliance cycle. In this role, you will go beyond deploying individual security controls: you will build an effective ISMS, conduct internal audits, defend the company’s security posture before partners and clients (Security Due Diligence), and formalize the BCP/DR process
Key Responsibilities:
- Lead the ISMS implementation and ISO/IEC 27001 certification programme: policies, risk assessment, Statement of Applicability, corrective action register. Coordinate with our external implementation partner and certification body, and prepare the company for Stage 1 and Stage 2 audits
- Plan and conduct internal ISMS audits and management reviews, ensuring the process is independent and properly evidenced
- Own security due diligence: partner and customer security questionnaires, preparation and management of the data room, technical sessions with their auditors, and counterparty assessments in return
- Build third-party risk management from the ground up: supplier assessments, security requirements in contracts and onboarding, and a register of third parties with access to our systems and data
- Document and operationalise BCP/DR: RTO/RPO for critical services, recovery procedures, and a working exercise cycle
- Work directly with the engineering team to verify that stated controls actually function, rather than only existing on paper
Must-Have:
- Experience covering at least one full ISO 27001 certification cycle — from the start of implementation through to certificate issuance
- Hands-on internal ISMS audit experience: audit programme, criteria, findings, and corrective action tracking
- Experience preparing responses to security due diligence or security questionnaires from the side of the company being assessed
- Experience conducting risk assessments and building risk treatment plans that have withstood external audit
- English at a confident working level — negotiating with auditors, certification bodies, and partner legal teams
- Willingness to build from scratch. We have a gap assessment, deadlines, and management backing — we do not have ready-made processes or templates
- Ability to state status plainly. Our contractual commitments depend on the accuracy of these statements, so “in progress” does not get rounded up to “done” here
Nice to Have:
- ISO 27001 Lead Implementer or Lead Auditor, CISM, CISA
- Defence sector experience, or work with export control regimes
- IEC 62443 or industrial/manufacturing security
- Privacy experience: RoPA, data subject requests, DPAs, GDPR
- A second completed certification cycle
What We Offer:
- Opportunity to build strategic products that save lives and directly shape outcomes
- Official employment and military deferment (reservation) for eligible personnel
- Competitive salary with guaranteed on-time payments
- Paid annual leave and sick days
- Complete provisioning of high-quality tools, workwear, and consumables
- Continuous professional development and growth opportunities
- Comfortable working environment with uninterrupted power supply and dedicated rest areas
- Free daily lunches
- Corporate events and a collaborative, mission-driven team
About General Cherry
General Cherry is a Ukrainian defence-tech enterprise specializing in the design and production of unmanned aerial vehicles. We manage the full product life cycle: from engineering concepts and field testing to serial manufacturing and deployment.
Our systems are engineered for real-world combat conditions and continuously upgraded based on front-line feedback. All of our products are codification-certified and battle-tested.
We value the experience of military veterans and believe that together we can accelerate technological advancements in defense. If your skills align with this position, we look forward to reviewing your application!
Відгукнутись на вакансію