Head of Security & ISMS for Global SaaS Platform

Centra Sweden; Wrocław; On-site; PLN 320,000 - 520,000; Full time

Job summary

Centra Sweden is seeking an experienced security leader in Poland to bridge hands-on security work with high-level strategy. You will own and evolve the ISMS, enforce practical security standards, and drive governance for the Centra Platform, cloud environments, and vendor security reviews.

You will collaborate with CTO and engineering leadership, manage risk across sales enablement, incident response, and executive reporting, and guide AI tooling governance while maintaining a strong security

Qualifications

• ISO 27001 Internal/Lead Auditor certification with ISMS auditing experience.
• Proven track record communicating security priorities to C-suite.
• Experience defining security standards for SaaS platforms and cloud environments.
• Ability to balance security rigor with business speed and usability.
• Experience establishing governance for AI tooling and integrations.

Responsibilities

• Own and improve the ISMS (ISO 27001) across internal and external audits.
• Define security standards for Centra Platform, cloud, and internal systems with engineering leadership.
• Lead security evaluations for prospects and oversee third-party vendor reviews.
• Drive end-to-end information security risk management and incident response.
• Oversee IAM, privileged access reviews, endpoint protection, and security configurations.

Skills

ISO 27001 Certification & Audit

Executive communication

Security governance

Pragmatic risk approach

AI governance

Job description

Centra Sweden is seeking an experienced security leader in Poland to bridge hands-on security work with high-level strategy. You will own and evolve the ISMS, enforce practical security standards, and drive governance for the Centra Platform, cloud environments, and vendor security reviews.

You will collaborate with CTO and engineering leadership, manage risk across sales enablement, incident response, and executive reporting, and guide AI tooling governance while maintaining a strong security