Head of Information Security

Mogi I/O : OTT/Podcast/Short Video Apps for you; Poland; On-site; PLN 178,000 - 250,000; Full time

Job summary

Mogi I/O : OTT/Podcast/Short Video Apps for you is seeking a Regional Information Security Manager to drive cybersecurity governance and information security across Eastern Europe. You will lead security strategy, manage cyber risk, and ensure compliance with global standards, partnering with business leaders and IT teams to protect critical assets from evolving threats.

The role requires senior leadership, strong governance skills, and a track record in risk-based decision making, incident

Qualifications

• Minimum 7 years in information security or IT security management.
• Strong expertise in governance, risk management, and security operations.
• Hands-on knowledge of network security, firewalls, VPNs, and vulnerability management.
• Understanding of ISO 27001, NIST, PCI-DSS, and related frameworks.
• Experience building security strategies, roadmaps, and risk mitigation plans.
• Proven leadership with cross-functional stakeholder management.
• English proficiency, strong communication; CISSP/CISM/GIAC desirable.
• Willingness to travel within the region.

Responsibilities

• Define and manage the regional information security strategy.
• Oversee cybersecurity governance across multiple entities.
• Identify, assess, and mitigate cyber risks with controls and plans.
• Coordinate with corporate security and local IT teams.
• Ensure compliance with ISO 27001, NIST, PCI-DSS, and policies.
• Lead information security, business continuity, resilience, and physical security.
• Coordinate vulnerability assessments, pen tests, and remediations.
• Develop and maintain security roadmaps and processes.
• Advise leadership on risk, compliance, and security improvements.
• Manage security budgets, investments, reporting, and improvement.
• Support incident management, threat response, and resilience planning.
• Provide security awareness and training to stakeholders.

Skills

Cybersecurity governance

Risk management

Security operations

Leadership

Stakeholder engagement

English communication

Certifications (CISSP/CISM)

Job description

About The Role

We are seeking an experienced Regional Information Security Manager to lead cybersecurity governance and information security initiatives across multiple business entities in Eastern Europe. The successful candidate will be responsible for implementing regional security strategies, managing cyber risk, ensuring compliance with global security standards, and collaborating closely with business leaders, IT teams, and regional stakeholders to protect critical information assets. Strong leadership, cybersecurity governance, and risk management expertise are essential.

Location - Prague, Czech Republic
Experience - 7 years

Key Responsibilities

• Implement and manage the regional information security strategy aligned with global security policies.
• Oversee cybersecurity governance across multiple countries and operational entities.
• Identify, assess, and mitigate cybersecurity risks through effective security controls and risk treatment plans.
• Coordinate security initiatives with corporate security and local IT teams.
• Ensure compliance with security standards including ISO 27001, NIST, PCI-DSS, and organizational policies.
• Lead information security, business continuity, operational resilience, and physical security initiatives.
• Coordinate vulnerability assessments, penetration testing, and remediation activities.
• Develop and maintain security roadmaps, policies, procedures, and operational processes.
• Advise senior leadership on cybersecurity risks, compliance, and strategic security improvements.
• Manage security budgets, investments, reporting, and continuous improvement initiatives.
• Support incident management, threat response, and cyber resilience planning.
• Provide security awareness, guidance, and training to business stakeholders and local teams.

Requirements

• Minimum 7 years of experience in Information Security, Cybersecurity, or IT Security Management.
• Strong expertise in cybersecurity governance, risk management, and security operations.
• Hands-on knowledge of network security, firewalls, VPNs, endpoint security, vulnerability management, and penetration testing.
• Good understanding of ISO 27001, NIST, PCI-DSS, and other industry security frameworks.
• Experience developing security strategies, roadmaps, and risk mitigation plans.
• Proven leadership and stakeholder management experience across regional or multinational environments.
• Excellent written and verbal communication skills in English.
• Professional certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
• Strong analytical, problem-solving, and decision-making skills.
• Willingness to travel occasionally within the assigned region.