Head of Information Security

Head of Information Security (Information Security/GRC/SOC 2/ISO 27001/Cloud Security)

Poland | Fully remote | Full-time, embedded | B2B | EUR 75,000 to 95,000

Join a fast-growing global technology company building enterprise SaaS for large, security -conscious clients. The organisation needs someone to own information security outright - building the programme properly, then running it day to day.

This is a hands-on role, not an advisory one.

Head of Information Security - Responsibilities:

• Owning the security programme end to end - policies, controls, risk assessments, evidence and management reporting
• Owning enterprise-client diligence - the security questionnaires, cyber assessments and control validations that arrive from large enterprise clients, along with the evidence behind them
• Getting security built into cloud infrastructure, APIs and the development lifecycle by working alongside engineers rather than mandating it
• Running vulnerability management and remediation, and tracking findings through to closure
• Owning identity and access - least privilege, MFA, access reviews, privileged access and joiner mover leaver processes
• Keeping incident response, tabletop exercises and recovery testing current and tested

Head of Information Security - Requirements:

• Fluent written and spoken English, strong enough for auditors, enterprise clients and executive conversations
• You have got security work adopted by teams that did not report to you. You can give a specific example, including what happened when people pushed back
• You have personally built or materially improved a security programme. You can say what was broken when you arrived, what you changed, and what measurably improved
• You have led responses to enterprise-client security reviews, due diligence questionnaires or independent audits such as SOC 2 or ISO 27001
• Experience in SaaS, enterprise software or another environment with demanding client assurance requirements
• Hands-on depth across cloud security, identity and access, secure development, vulnerability management, monitoring and incident response

Head of Information Security - BONUS POINTS:

• SOC 2 Type II or ISO 27001 taken through end to end
• Experience supporting security reviews from large enterprise clients
• Exposure to API security or AI governance
• CISSP, CISM, CCSP, CRISC or equivalent practical experience

Genuine ownership of the function here, rather than a slice of someone else's programme. The organisation will back you on technology you have not used before. What it will not flex on is communication, accountability and owning outcomes.

If you're a security leader who enjoys building a programme properly and getting it adopted through partnership rather than authority - this is a strong opportunity to own the function outright.