CISO & Information Security Leader — Build a Unified Program (Hybrid)

TechTree; Warszawa; Hybrid; PLN 400,000 - 700,000; Full time

Benefits offered by this job

private medical care

sport card

life insurance

annual training budget

hybrid (Kraków or Warsaw)

Job summary

TechTree, an AI-driven recruitment platform, supports a fast-scaling international SaaS company in hiring a Head of Information Security & Compliance (CISO). The role is based in Poland with hybrid options in Kraków or Warsaw.

You will build the group security programme, own ISO 27001 and GDPR across three jurisdictions, lead audits, and be the primary point of contact for customers, insurers, and the board, coordinating across entities in multiple countries.

Qualifications

• Led information security as the most senior security leader in the business.
• Experience delivering ISO 27001 across multiple entities/countries.
• Practical GDPR leadership across more than one jurisdiction.
• Proven ability to reduce risk with credible, auditable programmes.

Responsibilities

• Own ISO 27001 across all entities: scope, evidence, audits, recertification.
• Maintain and govern the ISMS and underpinning policies.
• Drive GDPR compliance across three jurisdictions with DPIAs and transfers.
• Lead customer security assurance, DPAs, and security calls for deals.
• Plan, run, and fix post-mortems to ensure improvements.
• Oversee business continuity and disaster-recovery testing annually.
• Maintain risk register, conduct access reviews, and report to executives.
• Coordinate external partners: MSPs, pen testers, security vendors, insurers.

Skills

ISO 27001

GDPR compliance

Security governance

Audits & certifications

Incident response

Business continuity

Risk management

Vendor risk management

Security leadership

Job description

TechTree, an AI-driven recruitment platform, supports a fast-scaling international SaaS company in hiring a Head of Information Security & Compliance (CISO). The role is based in Poland with hybrid options in Kraków or Warsaw.

You will build the group security programme, own ISO 27001 and GDPR across three jurisdictions, lead audits, and be the primary point of contact for customers, insurers, and the board, coordinating across entities in multiple countries.