Interim Head of Information Security

N-iX LTD; Polska; Híbrido; PLN 210.000 - 310.000; Tempo integral

Benefícios oferecidos por esta vaga

Flexible working format

Competitive salary

Personalized career growth

Professional development tools

Education reimbursement

Corporate events

Other location-specific benefits

Resumo da vaga

N-iX is seeking an Interim Head of Information Security to shape and lead Client’s security strategy. You will report to the VP IT & Infrastructure and collaborate with Engineering, Legal, and Compliance teams.

The role is temporary (4-6 months) with both full-time and part-time arrangements considered, and offers flexible remote/office options. You will own and evolve the security program, integrate security into software development, define pragmatic standards, and prepare for PCI-DSS and SOC

Qualificações

• 7+ years of relevant professional experience in Information Security or closely related fields.
• Degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent knowledge gained through proven practical experience.
• Experience working with software development organizations, with a strong understanding of how modern applications and platforms are built and operated.
• Proven background in Information Security or Security Engineering roles, ideally within cloud-based or SaaS environments.
• Familiarity with PCI-DSS and SOC 2, or comparable approaches.
• Experience in environments handling sensitive (payment-related) data is a strong advantage.
• Exposure to emerging topics such as security considerations in AI-enabled environments is a plus.

Responsabilidades

• Ownership and continuous improvement of overall security posture, ensuring transparency of the security risk landscape through clearly defined and measurable KPIs.
• Definition and proactive evolution of the company’s information security strategy in alignment with business objectives and the evolving threat landscape. In close collaboration with Engineering, integration of security into software development (SDLC) and platform operations, promoting secure-by-design principles across the organization.
• Establishment of pragmatic security standards and guardrails, providing clear, risk-based guidance to support prioritization of security initiatives and enable teams to implement secure solutions effectively.
• Preparation of the organization for regulatory and audit requirements such as PCI-DSS and SOC 2 by translating compliance expectations into practical and scalable controls.
• Strengthening of capabilities for detecting and responding to security threats by promoting appropriate logging, monitoring, and alerting practices across applications and infrastructure.
• Evaluation and implementation of security technologies aligned with architecture and engineering workflows, including contributions to build-versus-buy decisions to ensure scalable and maintainable solutions.
• Acting as a trusted advisor by collaborating with internal stakeholders and representing company in security-related interactions with customers, partners, and auditors when required.

Conhecimentos

Information Security

Security Engineering

Cloud security

SDLC security

Communication

Formação

Bachelor's degree in CS/IT/Cybersecurity

Ferramentas

PCI-DSS

SOC 2

Descrição da vaga

N-iX is a global software development company founded in 2002, connecting over 2,400+ tech professionals across 40+ countries. We deliver innovative technology solutions in cloud computing, data analytics, AI, embedded software,IoT, and more to global industry leaders and Fortune 500 companies. Join us to create technology that drives real change for businesses and people across the world.

Currently, we are looking for experienced Interim Head of Information Security who will shape and lead Client’s security strategy. In this role you report to the VP IT & Infrastructure and collaborate closely with Engineering, Legal, and Compliance teams.

This role offers the opportunity to further develop the client’s Information Security function into a proactive, engineering-aligned capability that supports secure software development secure by design, ensures readiness for audits such as PCI-DSS and SOC 2, and strengthens company resilience in an evolving threat landscape.

We are looking for a leader with strong technical credibility, a pragmatic mindset, and experience working in software-driven environments.

The position is temporary (4-6 months), and we are open to both full-time and part-time arrangements.

Responsibilities

• Ownership and continuous improvement of overall security posture, ensuring transparency of the security risk landscape through clearly defined and measurable KPIs.
• Definition and proactive evolution of the company’s information security strategy in alignment with business objectives and the evolving threat landscape. In close collaboration with Engineering, integration of security into software development (SDLC) and platform operations, promoting secure-by-design principles across the organization.
• Establishment of pragmatic security standards and guardrails, providing clear, risk-based guidance to support prioritization of security initiatives and enable teams to implement secure solutions effectively.
• Preparation of the organization for regulatory and audit requirements such as PCI-DSS and SOC 2 by translating compliance expectations into practical and scalable controls.
• Strengthening of capabilities for detecting and responding to security threats by promoting appropriate logging, monitoring, and alerting practices across applications and infrastructure.
• Evaluation and implementation of security technologies aligned with architecture and engineering workflows, including contributions to build-versus-buy decisions to ensure scalable and maintainable solutions.
• Acting as a trusted advisor by collaborating with internal stakeholders and representing company in security-related interactions with customers, partners, and auditors when required.

Requirements

Professional Experience

• 7+ years of relevant professional experience in Information Security or closely related fields.
• Degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent knowledge gained through proven practical experience.
• Experience working with software development organizations, with a strong understanding of how modern applications and platforms are built and operated.
• Proven background in Information Security or Security Engineering roles, ideally within cloud-based or SaaS environments.
• Familiarity with common security standards and frameworks such as PCI-DSS and SOC 2, or comparable approaches.
• Experience in environments handling sensitive (payment-related) data is a strong advantage.
• Exposure to emerging topics such as security considerations in AI-enabled environments is a plus.

Technical Competencies

• Strong technical foundation supported by hands-on experience.
• Solid understanding of modern application architectures, APIs, identity and access management concepts, and typical vulnerabilities affecting distributed systems.
• Ability to confidently discuss architecture decisions with engineering teams.
• Experience evaluating security tooling and approaches that integrate effectively into modern development workflows, including a clear understanding of how logging, monitoring, and detection capabilities contribute to improving security posture.

Leadership & Personal Skills

• Strong sense of ownership and accountability for outcomes, with a clear motivation to improve the organization’s security posture.
• Experience leading and developing small teams.
• Clear and effective communication skills across both technical and non-technical stakeholders, with the ability to build trust across the organization.
• Fluency in English (written and spoken) is required; German is considered a plus.
• Structured and transparent working style with a focus on measurable progress. A team-oriented mindset that fosters constructive dialogue and promotes a culture where security is understood as a shared responsibility.

We offer

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits
• not applicable for freelancers