Head/Lead of InfoSec & IT Risk

Harvey Nash Technology; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

An international financial services firm is seeking a Head/Lead of InfoSec & IT Risk to lead the development and execution of the organization's information security strategy. The role requires over 10 years of experience in information security or IT risk and strong team leadership skills. This position involves ensuring system protection against cyber threats, overseeing a team of specialists, and liaising with senior stakeholders. The ideal candidate should also have a deep understanding of security principles and frameworks like ISO 27001 and NIST.

Benefits

Annual bonus (approx. 20%)

Flexible working hours

Opportunity for professional development

Qualifications

• 10+ years of experience in information security or IT risk.
• CISSP certification preferred.
• Fluent in English (B2).

Responsibilities

• Lead development and execution of information security strategy.
• Ensure protection against cyber threats and technology-related risks.
• Oversee a team and liaise with senior leaders.

Skills

Cyber security principles

IT risk frameworks

Team leadership

Security technologies

ISO 27001 standards

Job description

• Security
• Angielski (B2)
• CISSP
• DORA
• NIST
• ISO27001
• 10+ years of experience in information security / IT risk
• Experience in team leadership
• Deep understanding of cyber security principles, IT risk frameworks, and operational resilience practices
• Ability to design and implement security strategies, policies, and controls
• Hands-on experience with security technologies
• Familiarity with relevant standards and frameworks (e.g., ISO 27001, NIST, COBIT, GDPR, DORA).

Opis oferty

For our client, international company providing financial services to companies, we are looking for:

Head/Lead of InfoSec & IT Risk

Salary: 30 000 – 36 500 PLN gross/ month + annual bonus (ab. 20%) [employment preferred]

Warsaw (2 days in office per week)

• Leading the development and execution of the organisation’s information security and IT risk strategy
• Ensuring the protection of systems, data, and operations against cyber threats and technology-related risks.
• Overseeing a team of specialists and working across IT, compliance, and business functions
• Liaising with senior leaders and executive stakeholders