Head of Cybersecurity - Remote AppSec & Cloud Lead

constructortech; Poland; Hybrid; PLN 300,000 - 520,000; Full time

Benefits offered by this job

Newborn bonus

Remote work

Hybrid work

Paid leave

Patent remuneration

English classes

Job summary

Constructor is seeking a Head of Cybersecurity to lead and expand our security function across four areas: application security, security compliance, infrastructure and cloud security, and business application security. You’ll inherit a small security team, set direction, and work hands-on with engineering, IT and compliance.

The role involves building an AppSec program with CI/CD integration and AI-assisted tooling, owning ISO 27001 and SOC 2 audits, and safeguarding Kubernetes and cloud

Qualifications

• 8+ years in information security, including 3+ years in a leadership role.
• Track record running application security programs, ideally with CI/CD‑integrated tooling and AI‑assisted code review.
• Hands-on experience with ISO 27001 and/or SOC 2 audits; capable of leading audits to completion.
• Experience securing business applications (M365, CRM, ERP) and managing vendor risk.
• Ability to explain risk and trade‑offs clearly to engineers and executives.
• Comfortable leading a small team while balancing competing demands.
• Working knowledge of Kubernetes and cloud security; sovereign cloud experience is a plus.

Responsibilities

• Build and run our AppSec program, including AI-assisted reviews of code and pull requests.
• Integrate security checks into CI/CD pipelines so vulnerabilities are caught before production.
• Run developer security training and champion secure coding practices org-wide.
• Evaluate and roll out AI coding tools in ways that improve, not undermine, code security.
• Own ISO 27001 and SOC 2 certification and ongoing security audits.
• Define security standards for infrastructure-as-code, network architecture, and access control.
• Work closely with IT and Business apps to secure Microsoft 365 and other line-of-business systems.

Skills

Leadership

Application security

CI/CD tooling

Cloud security

Kubernetes

Tools

Kubernetes

Job description

Constructor is seeking a Head of Cybersecurity to lead and expand our security function across four areas: application security, security compliance, infrastructure and cloud security, and business application security. You’ll inherit a small security team, set direction, and work hands-on with engineering, IT and compliance.

The role involves building an AppSec program with CI/CD integration and AI-assisted tooling, owning ISO 27001 and SOC 2 audits, and safeguarding Kubernetes and cloud