Cybersecurity Manager

• Several years of leadership experience in cybersecurity or information security.
• Proven experience managing expert teams and delivering complex security projects.
• Ability to combine strategic business thinking with strong technical expertise.
• Experience presenting recommendations and reporting to senior management and executive boards.
• Practical knowledge of ISO 27001 and PCI DSS standards and requirements.
• Hands-on experience in cybersecurity risk management.
• Solid understanding of security incident management and response processes.
• Knowledge of application security, IT infrastructure security, and cloud security, particularly within Microsoft Azure environments.
• Excellent English communication skills (minimum C1 level).

Nice to have:

• Experience working within organizations regulated by the Polish Financial Supervision Authority (KNF).
• Experience in the financial services, payments, banking, or fintech sectors.
• Participation in security certification programs and audits.
• Knowledge of additional cybersecurity frameworks, standards, and regulatory requirements.

• Develop and execute the organization's cybersecurity strategy.
• Foster a strong security culture and promote cybersecurity best practices across the organization.
• Lead and develop the Cybersecurity Department, including team capability development and oversight of strategic security initiatives.
• Define and implement information security standards, policies, and procedures.
• Oversee data protection and the security of information processing and storage.
• Conduct cybersecurity risk assessments, identify threats, and define mitigation plans.
• Coordinate security reviews of systems, applications, and IT infrastructure.
• Oversee application security and ensure the implementation of security-by-design principles.
• Develop and maintain the security incident management and response process.
• Coordinate activities related to compliance with regulatory and industry requirements, particularly ISO 27001 and PCI DSS.
• Collaborate with internal and external auditors, regulators, and control functions.
• Develop and implement Security Software Development Lifecycle (SSDLC) practices.
• Partner with company boards and key business and technology stakeholders.
• Monitor technology trends, regulatory developments, and emerging threats, translating them into actionable improvements for the organization.