Chief Information Security Officer (CISO)

Instant Impact; Kraków; On-site; PLN 400,000 - 650,000; Full time

Job summary

Instant Impact is representing a leading global Financial Services firm seeking an experienced Chief Information Security Officer (CISO) to provide strategic and operational leadership across cybersecurity, information security governance, risk management, and regulatory compliance. This senior role will shape and deliver the organisation's security strategy during a major transformation and beyond.

You will drive a resilient and scalable security framework, oversee IAM, SOC, vulnerability

Qualifications

• Proven experience in a senior cybersecurity leadership role (CISO, Head of Information Security, Security Lead).
• Strong governance, enterprise risk management, and information security leadership experience.
• Experience delivering security programmes in complex, regulated environments.
• Deep knowledge of regulatory compliance and ISO 27001 frameworks.
• Experience managing third-party security services and vendor risk.
• Excellent stakeholder management with executive/board exposure.

Responsibilities

• Define and deliver the organisation's cybersecurity strategy and roadmap.
• Lead target security operating model development and implementation.
• Drive ISO 27001 readiness initiatives and report cyber risk to executives and board.
• Maintain security architecture aligned with business/technology goals.
• Oversee IAM, SOC, vulnerability management and incident response capabilities.
• Manage relationships with security vendors, MSPs and third-party suppliers.
• Lead third-party security risk management and assurance processes.
• Embed security requirements across transformation programmes.
• Develop and maintain security policies, standards, and governance frameworks.
• Maintain cyber risk registers and provide regular security posture reporting.
• Oversee MSP performance and detection/response capabilities.
• Support security transition and operational readiness programmes.

Skills

Senior cybersecurity leadership

Governance & risk management

Information security leadership

Regulatory compliance (ISO 27001)

Vendor risk management

Stakeholder management

Security architecture

IAM & SOC

Vulnerability management

Incident response

Security strategy & roadmaps

Executive-level communication

Job description

Chief Information Security Officer (CISO)

Department: Client Role

Employment Type: Full Time

Location: Cracow, PL

Description

We are currently representing a leading global Financial Services firm in the appointment of high‑calibre professionals as part of a period of strategic growth and investment. Our client operates at the intersection of corporate, fiduciary and regulatory services, partnering with private equity houses, investment managers and international financial institutions. Backed by long‑term institutional investment and an established global brand, the firm is scaling its capabilities, technology and international footprint.

We are seeking an experienced Chief Information Security Officer (CISO) to provide strategic and operational leadership across cybersecurity, information security governance, risk management, and regulatory compliance. This senior leadership position will play a pivotal role in shaping and delivering the organisation's security strategy during a significant business transformation programme and beyond.

This is a unique opportunity to shape and mature the security function of a transforming financial services organisation, driving a resilient and scalable cybersecurity framework.

Key Responsibilities

• Define and deliver the organisation's cybersecurity strategy and security roadmap.
• Lead the development and implementation of the target security operating model.
• Drive ISO 27001 readiness initiatives and provide cyber risk reporting to executive and board-level stakeholders.
• Maintain ownership of security architecture and ensure alignment with business and technology objectives.
• Oversee Identity and Access Management (IAM), Security Operations (SOC), vulnerability management, and incident response capabilities.
• Manage relationships with security vendors, managed service providers, and third-party suppliers.
• Lead third-party security risk management activities and assurance processes.
• Embed security requirements across business and technology transformation programmes.
• Develop and maintain security policies, standards, and governance frameworks.
• Maintain cyber risk registers and provide regular reporting on security posture and emerging threats.
• Oversee the performance and effectiveness of managed security services, including detection and response capabilities.
• Support the delivery of security transition and operational readiness programmes.

Skills, Knowledge and Expertise

• Proven experience in a senior cybersecurity leadership role, such as Security Lead, Head of Information Security, or CISO.
• Strong background in cybersecurity governance, enterprise risk management, and information security leadership.
• Demonstrable experience delivering security programmes within complex and regulated environments.
• Strong knowledge of regulatory compliance requirements and recognised security frameworks, including ISO 27001.
• Experience managing third-party suppliers, outsourced security services, and vendor risk.
• Excellent stakeholder management skills, with experience engaging executive leadership and board-level audiences.
• Strong understanding of security architecture, IAM, security operations, vulnerability management, and incident response.
• Excellent communication, influencing, and decision-making capabilities.