Senior IT Security Specialist

Veo is an AI-powered sports camera and analysis ecosystem built for one job: turning what happens on a pitch into proof. Capture, viewing, data and analytics, sharing- all in one system, all pointed at the same thing. That's bigger than football. Every player, on every pitch, gets access to the kind of proof only the top academies used to keep for themselves. It's the future we're building. Every youth match still has a moment nobody saw. A run that won the game, underneath everyone's radar. A kid written off before anyone actually checked. We exist to close that gap, one match at a time. One camera on any pitch feeds an AI that tracks every player and the ball for the whole game, turning what happened into evidence instead of somebody's opinion. That's the actual job here. Not shipping features. Building the system that gives proof to someone who used to rely on a hunch. If you've ever watched a match and wondered who else saw what you saw, you already know why this matters. We're looking for people who want to build that future with us. The Opportunity Veo runs on a fast-growing estate of devices, SaaS tools and offices across Copenhagen, Berlin and Miami. As the first operational IT security hire, you'll own the security of that environment: the devices our people use, the identities and access that connect them to our tools, and how we respond when something goes wrong. This isn't a "follow the runbook" role. You'll sit in our IT team, assess where we are today, set the direction, and build the processes and tooling that keep Veo secure as we scale. What You Will Do You'll be hands-on across endpoint, identity, and operational security, and you'll be the go-to person for IT security across the business.

• Own endpoint security across our macOS, Windows, Linux, iOS and Android devices, including EDR, MDM, patching, encryption and hardening baselines
• Define and enforce our BYOD approach, using conditional access, device compliance checks and data separation so people can work flexibly without putting company data at risk
• Run SSO, SCIM and MFA across our SaaS applications, and own onboarding and offboarding so access is granted and removed on time, every time.
• Build identity governance, including regular access reviews, least-privilege access, and clear ownership of who has access to what
• Lead IT incident response from detection and triage through containment, investigation and post-incident review, and keep our playbooks sharp
• Monitor and respond to CVEs affecting our endpoints and SaaS tools, assessing risk, prioritizing fixes, and making sure patches are applied on time
• Plan and run phishing simulations and security awareness training that change behavior, and measure the results
• Drive day-to-day operational security, including alert monitoring, vulnerability management, SaaS vendor assessments, and keeping policies and runbooks current
• Lead our IT security work for GDPR and NIS2, from implementing controls to maintaining documentation and evidence, together with Legal and GRC
• Help lay the groundwork for future SOC 2 and ISO 27001 certification
• Own our office security systems, such as CCTV and door access, working with our Office Manager

What You Could Bring You've likely spent several years in IT security or security operations, ideally in a growing tech company, and you're comfortable being the person who owns security end-to-end. That experience tends to show up in several of the following:

• Endpoint and device security: hands-on with EDR and MDM tools such as CrowdStrike, SentinelOne, Hexnode, Intune or Kandji, across desktop and mobile, including securing BYOD environments
• Identity and access: deep experience with Google Workspace and Entra rolling out SSO, SCIM, and MFA, and running joiner/mover/leaver processes and access reviews.
• Incident response: you've led real incidents end-to-end and can stay calm and clear under pressure.
• Vulnerability management: you track CVEs, judge real-world risk quickly, and get fixes rolled out.
• Security culture: you've run phishing awareness programs and can explain risk in plain language to people who aren't technical.
• Compliance in practice: you've applied GDPR and NIS2 requirements in an operational role. Experience with SOC 2 or ISO 27001 is a strong advantage as we work towards them.
• Linux: administration and hardening experience is highly valued.

Nice To Have

• Scripting and automation (Python, PowerShell, Bash)
• SIEM experience
• Certifications such as CISSP, CISM, OSCP, or GIAC

How We Work You'll be part of the IT team within Administration & Finance and work most closely with GRC, the Security Enablement Team, and Legal. We're pragmatic; we prioritize what matters most, and we favor simple solutions that help people work securely without slowing them down. If you match on several of these areas but not all, apply anyway. We care more about how you think and what you'll own than about ticking every box. Our Copenhagen office mirrors our innovative technology – with an indoor ball court, rooftop terrace, and well-equipped gym. We have created a facility that supports connecting disciplines across the business, facilitates creative thinking, and gives the space to engage with colleagues, our global partners, and the entire Veo community. Values we hold at Veo: Dare - We take initiative, stay curious, and challenge the status quo in our work. Own it - We drive impact by identifying opportunities, taking responsibility, and confidently executing. Level up - We embrace growth, continuously learning and shaping our skills. Play as a team - We collaborate across a diverse organization, leveraging shared insights for stronger outcomes. Customer Centric - We deliver value by having close partnerships and a deep understanding of our customers (internally and externally) We value diversity and inclusion and welcome applicants from all backgrounds, even if your experience doesn’t completely match every qualification listed. What matters most is your creativity, potential, and ability to make meaningful contributions.