Head of Information Security and Compliance

At SINGU, we are building Europe's leading platform for managing warehouse, logistics, retail, and multi-site commercial real estate portfolios. Our unified CAFM platform supports over 250 million m² of real estate worldwide and more than 500,000 professionals, including management of 100,000+ buildings across 35+ countries. We have grown through acquisitions spanning entities in three countries and are backed by a leading growth equity investor, partnering with global real estate leaders.

• Proven leadership of information security and compliance as the senior security person in a business.
• Experience taking ISO 27001 through at least one full audit cycle.
• Practical application of GDPR in more than one country.
• Experience maturing security programs across businesses at different stages, preferably in an acquisition-based group.
• Pragmatic approach to building security programs, balancing real risk reduction with business velocity.
• Ability to communicate credibly with customers, auditors, and board members.
• Hold certifications such as CISSP, CISM, or equivalent.
• Strong professional English language skills; Polish is beneficial but not essential.

• Manage ISO 27001 and Cyber Essentials Plus certifications across all entities, including scope, evidence, audits, and recertification.
• Oversee the Information Security Management System (ISMS) and maintain credible policies.
• Ensure GDPR compliance across three jurisdictions including processing records, DPIAs, transfers, subject requests, and breach notification.
• Handle customer security assurance via questionnaires, due diligence packs, contracts, and participation in security-related deal calls.
• Lead end-to-end incident response including planning, execution, and post-mortems.
• Own business continuity and disaster recovery for group systems with annual tests and tabletop exercises.
• Set and verify security baselines for endpoints and internal systems such as CRM, ERP, email, and collaboration tools.
• Maintain risk register, access reviews, and control testing with reports to the executive team.
• Manage relationships with external partners including MSPs, penetration testers, security vendors, and cyber insurance.
• Develop and maintain effective security awareness programs.

Singu Group is an equal opportunity employer welcoming applications from all backgrounds.