Senior Information Security Officer — ISO 27001 & SOC2 Lead

Hitachi, Ltd.; Wrocław; On-site; PLN 150,000 - 210,000; Full time

Job summary

GlobalLogic seeks an experienced Security Risk & Compliance professional to drive ISMS design and audits in a multinational environment. You will lead internal and external ISO 27001 and SOC 2 activities, develop security controls, and communicate complex risk concepts to stakeholders.

You will collaborate across teams, manage incident handling and risk mitigation, and contribute to a robust cybersecurity posture. Strong English skills and 5+ years in the field are expected.

Qualifications

• Proven experience designing and maintaining ISMS based on ISO 27001/27002.
• Experience with SOC 2 compliance assessments.
• Proven ISMS audit experience including planning, execution, and reporting.
• Leading security audits and providing actionable recommendations.
• Excellent communication and ability to present to technical and non-technical audiences.
• High integrity and ability to handle confidential matters.
• Fluent English.
• 5+ years of professional experience.

Responsibilities

• Execute internal information security audits (ISO 27001, ITGC) to identify vulnerabilities and ensure regulatory compliance.
• Handle external information security audits (ISO 27001, SOC2 Type II).
• Manage the team’s participation in internal and external auditing activities.
• Develop and document security processes and control policies based on ISO 27001.
• Handle information security incidents.
• Manage risk assessments and mitigation strategies across the enterprise.
• Develop and enforce security policies and guidelines to protect assets and data integrity.
• Oversee monitoring and analysis of security events and incident response.
• Evaluate security technologies and provide recommendations to enhance cybersecurity posture.
• Prepare and present security reports and compliance metrics to management.

Skills

ISMS design

ISO27001/27002

SOC 2

ISMS audits

security audits

communication skills

English proficiency

team leadership

risk management

confidential handling

5+ years experience

Job description

GlobalLogic seeks an experienced Security Risk & Compliance professional to drive ISMS design and audits in a multinational environment. You will lead internal and external ISO 27001 and SOC 2 activities, develop security controls, and communicate complex risk concepts to stakeholders.

You will collaborate across teams, manage incident handling and risk mitigation, and contribute to a robust cybersecurity posture. Strong English skills and 5+ years in the field are expected.