Chief Information Security Officer (CISO)

Mogi I/O : OTT/Podcast/Short Video Apps for you; Poland; On-site; PLN 259,000 - 389,000; Full time

Job summary

Mogi I/O : OTT/Podcast/Short Video Apps for you seeks an experienced Regional Information Security Manager to drive cybersecurity governance and initiatives across Eastern Europe. The role centers on regional security strategy implementation, risk management, and leadership collaboration with IT and business leaders in Prague.

The ideal candidate has strong governance and risk management expertise, knowledge of ISO 27001, NIST, and PCI-DSS, and is prepared to travel occasionally within the

Qualifications

• 7+ years of experience in Information Security, Cybersecurity, or IT Security Management.
• Strong expertise in cybersecurity governance, risk management, and security operations.
• Hands-on knowledge of network security, firewalls, VPNs, endpoint security, vulnerability management, and penetration testing.
• Good understanding of ISO 27001, NIST, PCI-DSS, and other industry security frameworks.
• Experience developing security strategies, roadmaps, and risk mitigation plans.
• Proven leadership and stakeholder management across regional or multinational environments.
• Excellent written and verbal communication skills in English.
• Professional certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
• Willingness to travel occasionally within the assigned region.

Responsibilities

• Implement and manage the regional information security strategy aligned with global security policies.
• Oversee cybersecurity governance across multiple countries and operational entities.
• Identify, assess, and mitigate cybersecurity risks through effective security controls and risk treatment plans.
• Coordinate security initiatives with corporate security and local IT teams.
• Ensure compliance with security standards including ISO 27001, NIST, PCI-DSS, and organizational policies.
• Lead information security, business continuity, operational resilience, and physical security initiatives.
• Coordinate vulnerability assessments, penetration testing, and remediation activities.
• Develop and maintain security roadmaps, policies, procedures, and operational processes.
• Advise senior leadership on cybersecurity risks, compliance, and strategic security improvements.
• Manage security budgets, investments, reporting, and continuous improvement initiatives.
• Support incident management, threat response, and cyber resilience planning.
• Provide security awareness, guidance, and training to business stakeholders and local teams.

Skills

Cybersecurity governance

Risk management

Security operations

Leadership

Stakeholder management

English communication

Travel willingness

Job description

About The Role

We are seeking an experienced Regional Information Security Manager to lead cybersecurity governance and information security initiatives across multiple business entities in Eastern Europe. The successful candidate will be responsible for implementing regional security strategies, managing cyber risk, ensuring compliance with global security standards, and collaborating closely with business leaders, IT teams, and regional stakeholders to protect critical information assets. Strong leadership, cybersecurity governance, and risk management expertise are essential.

Location - Prague, Czech Republic
Experience - 7 years

Key Responsibilities

• Implement and manage the regional information security strategy aligned with global security policies.
• Oversee cybersecurity governance across multiple countries and operational entities.
• Identify, assess, and mitigate cybersecurity risks through effective security controls and risk treatment plans.
• Coordinate security initiatives with corporate security and local IT teams.
• Ensure compliance with security standards including ISO 27001, NIST, PCI-DSS, and organizational policies.
• Lead information security, business continuity, operational resilience, and physical security initiatives.
• Coordinate vulnerability assessments, penetration testing, and remediation activities.
• Develop and maintain security roadmaps, policies, procedures, and operational processes.
• Advise senior leadership on cybersecurity risks, compliance, and strategic security improvements.
• Manage security budgets, investments, reporting, and continuous improvement initiatives.
• Support incident management, threat response, and cyber resilience planning.
• Provide security awareness, guidance, and training to business stakeholders and local teams.

Requirements

• Minimum 7 years of experience in Information Security, Cybersecurity, or IT Security Management.
• Strong expertise in cybersecurity governance, risk management, and security operations.
• Hands-on knowledge of network security, firewalls, VPNs, endpoint security, vulnerability management, and penetration testing.
• Good understanding of ISO 27001, NIST, PCI-DSS, and other industry security frameworks.
• Experience developing security strategies, roadmaps, and risk mitigation plans.
• Proven leadership and stakeholder management experience across regional or multinational environments.
• Excellent written and verbal communication skills in English.
• Professional certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
• Strong analytical, problem-solving, and decision-making skills.
• Willingness to travel occasionally within the assigned region.