Global Information Security Director

Mogi I/O : OTT/Podcast/Short Video Apps for you; Poland; On-site; PLN 285,000 - 392,000; Full time

Job summary

Mogi I/O : OTT/Podcast/Short Video Apps for you is seeking an experienced Regional Information Security Manager to lead cybersecurity governance and information security initiatives across multiple business entities in Eastern Europe.

The role focuses on implementing regional security strategies, managing cyber risk, and ensuring compliance with global security standards while collaborating with business leaders and IT teams in the region.

Qualifications

• Minimum 7 years of experience in Information Security or IT Security Management.
• Strong governance, risk management, and security operations expertise.
• Experience leading regional or multinational information security programs.
• Hands-on knowledge of security controls, vulnerability management, and testing.
• Excellent written and verbal English communication; travel within the region.

Responsibilities

• Implement and manage the regional information security strategy aligned with global security policies.
• Oversee cybersecurity governance across multiple countries and operational entities.
• Identify, assess, and mitigate cybersecurity risks through effective security controls and risk treatment plans.
• Coordinate security initiatives with corporate security and local IT teams.
• Ensure compliance with ISO 27001, NIST, PCI-DSS, and organizational policies.
• Lead information security, business continuity, operational resilience, and physical security initiatives.
• Coordinate vulnerability assessments, penetration testing, and remediation activities.
• Develop and maintain security roadmaps, policies, procedures, and operational processes.
• Advise senior leadership on cybersecurity risks, compliance, and strategic security improvements.
• Manage security budgets, investments, reporting, and continuous improvement initiatives.
• Support incident management, threat response, and cyber resilience planning.
• Provide security awareness, guidance, and training to business stakeholders and local teams.

Skills

Governance

Risk management

Leadership

Security operations

Network security

Vulnerability management

Penetration testing

Stakeholder management

Security governance

Education

CISSP Certification

CISM Certification

GIAC Certifications

Job description

About The Role

We are seeking an experienced Regional Information Security Manager to lead cybersecurity governance and information security initiatives across multiple business entities in Eastern Europe. The successful candidate will be responsible for implementing regional security strategies, managing cyber risk, ensuring compliance with global security standards, and collaborating closely with business leaders, IT teams, and regional stakeholders to protect critical information assets. Strong leadership, cybersecurity governance, and risk management expertise are essential.

Location - Prague, Czech Republic
Experience - 7 years

Key Responsibilities

• Implement and manage the regional information security strategy aligned with global security policies.
• Oversee cybersecurity governance across multiple countries and operational entities.
• Identify, assess, and mitigate cybersecurity risks through effective security controls and risk treatment plans.
• Coordinate security initiatives with corporate security and local IT teams.
• Ensure compliance with security standards including ISO 27001, NIST, PCI-DSS, and organizational policies.
• Lead information security, business continuity, operational resilience, and physical security initiatives.
• Coordinate vulnerability assessments, penetration testing, and remediation activities.
• Develop and maintain security roadmaps, policies, procedures, and operational processes.
• Advise senior leadership on cybersecurity risks, compliance, and strategic security improvements.
• Manage security budgets, investments, reporting, and continuous improvement initiatives.
• Support incident management, threat response, and cyber resilience planning.
• Provide security awareness, guidance, and training to business stakeholders and local teams.

Requirements

• Minimum 7 years of experience in Information Security, Cybersecurity, or IT Security Management.
• Strong expertise in cybersecurity governance, risk management, and security operations.
• Hands-on knowledge of network security, firewalls, VPNs, endpoint security, vulnerability management, and penetration testing.
• Good understanding of ISO 27001, NIST, PCI-DSS, and other industry security frameworks.
• Experience developing security strategies, roadmaps, and risk mitigation plans.
• Proven leadership and stakeholder management experience across regional or multinational environments.
• Excellent written and verbal communication skills in English.
• Professional certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
• Strong analytical, problem-solving, and decision-making skills.
• Willingness to travel occasionally within the assigned region.