Head of Information Security & Compliance (CISO)

TechTree; Kraków; Hybrid; PLN 300,000 - 520,000; Full time

Benefits offered by this job

Private medical care

Sport card

Life insurance

Annual training budget

Hybrid (Kraków or Warsaw)

Job summary

TechTree partners with a fast-scaling international SaaS company to appoint a Head of Information Security & Compliance in Kraków or Warsaw, hybrid. This senior role leads the security programme across multiple jurisdictions and prepares for acquisitions.

You’ll own ISO 27001 implementation, GDPR compliance, and customer security assurance, with audits, policies, and incident response. Fluent English is essential, Polish helpful; expect close interaction with board and insurers as the primary

Qualifications

• Led information security as the most senior security leader in the business.
• ISO 27001 implementation with at least one full audit cycle.
• GDPR applied in practice across multiple countries.
• Experience building security programmes in acquisitive environments.

Responsibilities

• Own the ISMS and the policies behind it, evidence, audits, and recertification.
• Oversee GDPR across three jurisdictions, DPIAs, transfers, breach notification.
• Lead incident response end-to-end, plan, run, and ensure improvements.
• Drive business continuity and DR with annual testing.
• Maintain risk register, access reviews, and control testing for executives.
• Coordinate with MSPs, pen testers, security vendors, and insurers.

Skills

ISO 27001

GDPR compliance

Security governance

CISSP/CISM

English proficiency

Job description

This is a role that TechTree is recruiting for on behalf of one of our clients.

TechTree is an AI-driven recruitment platform working with high-growth companies.

When you apply, our AI Agent matches you not just to this role, but to other relevant opportunities across our network, so one application can unlock multiple roles.

Head of Information Security & Compliance (CISO) — Build the group security programme at a fast-scaling international SaaS company. Kraków or Warsaw, hybrid.

A fast-growing international SaaS group powers the daily operations of over 250 million m² of real estate across 100,000+ buildings in 35+ countries. Backed by growth equity, scaling through acquisition, and partnering with names like Prologis, ECE, CTP, and Unibail-Rodamco-Westfield.

This is the senior security role in the group — yours to build. You’ll hold the certifications, front the audits, and be the person customers, insurers, and the board ultimately rely on. Several entities across three countries, each at a different maturity level. Your job: one coherent, credible programme across all of them, and ready for the next acquisition.

What You’ll Own

• ISO 27001 and Cyber Essentials Plus across every entity — scope, evidence, audits, recertification
• The ISMS and the policies behind it — current, genuinely used, credible to an auditor
• GDPR across three jurisdictions — processing records, DPIAs, transfers, breach notification
• Customer security assurance — questionnaires, DPAs, and the calls where deals are won or stalled on security
• Incident response end to end — plan, run, and ensure the post-mortem changes something
• Business continuity and DR, tested at least annually
• Risk register, access reviews, and control testing reported to the executive team
• External partners: MSPs, pen testers, security vendors, cyber insurance

What We’re Looking For

• Led information security as the most senior security person in the business
• ISO 27001 through at least one full audit cycle
• GDPR applied in practice across more than one country
• Security matured across businesses at different stages, ideally in a group built by acquisition
• Pragmatic programme builder — real risk reduction over theatre
• Credible in front of customers, auditors, and the board
• CISSP, CISM, or equivalent
• Strong professional English; Polish useful, not essential

What’s on offer:

competitive salary

• private medical care
• sport card
• life insurance
• annual training budget
• hybrid (Kraków or Warsaw)

What is TechTree?

TechTree combines AI agents with a human support team to give candidates a better, more transparent hiring experience.

Our AI Agent

Our AI Agent gets to know your background, experience, and what you’re optimising for. It continuously matches you to live roles across our network where there’s genuine alignment, not just keyword overlap.

Our Human Team

Our Human Team is there to support you through the process — answering questions, adding context, and making sure you’re never left guessing or ghosted.

We only post real jobs. Every role on TechTree is a live, active hire.