Chief Information Security & Compliance Officer

SINGU; Warszawa, Kraków; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Private medical care

Sport card

Life insurance

Annual training budget

Team integration budget

Job summary

SINGU in Warsaw is seeking a senior information security leader to own the group’s security program across three countries. You will certify, audit, and showcase security to customers, insurers, and the board, while guiding multiple entities through one coherent program.

You’ll drive ISO 27001, GDPR, incident response, business continuity, and vendor risk with pragmatism over bureaucracy, aligning acquisitions with a strong security foundation and protecting revenue.

Qualifications

• Led information security and compliance, ideally as the most senior security person in the business.
• ISO 27001 through full audit cycle and governance experience.
• Applied GDPR in practice across multiple countries.

Responsibilities

• Own ISO 27001 and Cyber Essentials Plus across all entities; lead SOC 2 when needed.
• Manage ISMS and policies; keep them current and auditable.
• Oversee GDPR processing, DPIAs, transfers, subject requests, breach notifications.
• Support customer security assurance; respond to questionnaires and vendor contracts.
• Own incident response end-to-end; run post-mortems and drive improvements.
• Lead business continuity and disaster recovery testing annually.
• Set security baselines for endpoints and internal systems; verify compliance.
• Maintain risk register, access reviews, and control testing for executive visibility.
• Coordinate with MSPs, testers, and security vendors; manage cyber insurance relation.
• Foster security awareness across the organization.

Skills

ISO 27001

Cyber Essentials Plus

SOC 2

ISMS

GDPR

Incident response

BCP/DR

Risk management

Customer security

English proficiency

CISSP/CISM

Education

CISSP/CISM or equivalent

Job description

SINGU in Warsaw is seeking a senior information security leader to own the group’s security program across three countries. You will certify, audit, and showcase security to customers, insurers, and the board, while guiding multiple entities through one coherent program.

You’ll drive ISO 27001, GDPR, incident response, business continuity, and vendor risk with pragmatism over bureaucracy, aligning acquisitions with a strong security foundation and protecting revenue.