CISO & Information Security Leader - Build Global Program

TechTree; Kraków; Hybrid; PLN 300,000 - 520,000; Full time

Benefits offered by this job

Private medical care

Sport card

Life insurance

Annual training budget

Hybrid (Kraków or Warsaw)

Job summary

TechTree partners with a fast-scaling international SaaS company to appoint a Head of Information Security & Compliance in Kraków or Warsaw, hybrid. This senior role leads the security programme across multiple jurisdictions and prepares for acquisitions.

You’ll own ISO 27001 implementation, GDPR compliance, and customer security assurance, with audits, policies, and incident response. Fluent English is essential, Polish helpful; expect close interaction with board and insurers as the primary

Qualifications

• Led information security as the most senior security leader in the business.
• ISO 27001 implementation with at least one full audit cycle.
• GDPR applied in practice across multiple countries.
• Experience building security programmes in acquisitive environments.

Responsibilities

• Own the ISMS and the policies behind it, evidence, audits, and recertification.
• Oversee GDPR across three jurisdictions, DPIAs, transfers, breach notification.
• Lead incident response end-to-end, plan, run, and ensure improvements.
• Drive business continuity and DR with annual testing.
• Maintain risk register, access reviews, and control testing for executives.
• Coordinate with MSPs, pen testers, security vendors, and insurers.

Skills

ISO 27001

GDPR compliance

Security governance

CISSP/CISM

English proficiency

Job description

TechTree partners with a fast-scaling international SaaS company to appoint a Head of Information Security & Compliance in Kraków or Warsaw, hybrid. This senior role leads the security programme across multiple jurisdictions and prepares for acquisitions.

You’ll own ISO 27001 implementation, GDPR compliance, and customer security assurance, with audits, policies, and incident response. Fluent English is essential, Polish helpful; expect close interaction with board and insurers as the primary