- Location
- Cracow, Cracow
- Type
- Full-time
- Department
- Administration
- Seniority
- C-Level
Description
Chief Information Security Officer (CISO)
Department: Client Role
Employment Type: Full Time
Location: Cracow, PL
Description
This is a unique opportunity to shape and mature the security function of a transforming financial services organisation, driving a resilient and scalable cybersecurity framework.
Key Responsibilities
- Define and deliver the organisation's cybersecurity strategy and security roadmap.
- Lead the development and implementation of the target security operating model.
- Drive ISO 27001 readiness initiatives and provide cyber risk reporting to executive and board-level stakeholders.
- Maintain ownership of security architecture and ensure alignment with business and technology objectives.
- Oversee Identity and Access Management (IAM), Security Operations (SOC), vulnerability management, and incident response capabilities.
- Manage relationships with security vendors, managed service providers, and third-party suppliers.
- Lead third-party security risk management activities and assurance processes.
- Embed security requirements across business and technology transformation programmes.
- Develop and maintain security policies, standards, and governance frameworks.
- Maintain cyber risk registers and provide regular reporting on security posture and emerging threats.
- Oversee the performance and effectiveness of managed security services, including detection and response capabilities.
- Support the delivery of security transition and operational readiness programmes.
Skills, Knowledge and Expertise
- Proven experience in a senior cybersecurity leadership role, such as Security Lead, Head of Information Security, or CISO.
- Strong background in cybersecurity governance, enterprise risk management, and information security leadership.
- Demonstrable experience delivering security programmes within complex and regulated environments.
- Strong knowledge of regulatory compliance requirements and recognised security frameworks, including ISO 27001.
- Experience managing third-party suppliers, outsourced security services, and vendor risk.
- Excellent stakeholder management skills, with experience engaging executive leadership and board-level audiences.
- Strong understanding of security architecture, IAM, security operations, vulnerability management, and incident response.
- Excellent communication, influencing, and decision-making capabilities.