Head of Cyber Security (Poland/Remote)

Brak informacji o wynagrodzeniu

C-Level / ManagerZdalnie·KrakówFull-time

#470320·Dodano 6 dni temu·6

Źródło: ZEN.com

Aplikuj teraz

Tech Stack / Keywords

SIEMEDR/XDRIAM/PAMCSPMWAFDevSecOpsNIST CSFISO 27001OWASPPCI DSS

Podsumowanie oferty

Lead the practical implementation and day-to-day operation of cyber security across ZEN.COM’s fintech organization. Build and lead the security team, and develop and operate security capabilities for the organization’s systems, applications, infrastructure, and data.

Wymagania

Several years of experience in cyber security, including leading a technical security function or managing a security team.
Strong experience operating in the First Line of Defense (1LoD), with direct accountability for building, implementing, and operating security capabilities.
Experience in fintech, digital banking, payment services, or other environments handling sensitive financial data.
Experience establishing security processes, selecting and deploying security technologies, and developing technical capabilities from the ground up.
Experience building teams, recruiting security specialists, and developing technical capabilities.
Strong technical knowledge of IT infrastructure, networking, operating systems, cloud environments, application security, and modern technology architectures.
Hands-on experience with security tools and technologies such as SIEM, EDR/XDR, vulnerability management, IAM/PAM, CSPM, WAF, and security automation platforms.
Experience managing vulnerabilities, responding to security incidents, investigating threats, and coordinating remediation activities.
Proven ability to define technical security standards and drive their practical implementation.
Experience working closely with Engineering, DevOps, Cloud, Infrastructure, or Platform teams to deliver security improvements.
Ability to assess security tools and solutions, make technical decisions, and manage implementation priorities, effectiveness, and costs.
Strong problem-solving skills and the ability to balance security requirements with business needs and delivery speed.
Familiarity with security frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, and OWASP.
Understanding of regulatory and industry requirements relevant to fintech, such as DORA and PCI DSS, where applicable.
Share Gallup test or similar assessment results, if available.

Nice to have:

Experience building a security function or scaling a security team in a growing organization.
Experience with cloud-native architectures and modern application delivery environments.
Experience implementing DevSecOps, Secure SDLC, Security by Design, and automated security testing.
Experience working in environments subject to financial services regulations and demanding security requirements.

Obowiązki

Build and lead the Cyber Security team: recruit security professionals, define the team structure and required skill sets, establish priorities, and develop the team’s technical capabilities.
Own day-to-day security operations, ensuring security measures are implemented, maintained, and continuously improved.
Build and implement the technical foundations, tools, processes, and operating model needed to secure systems, applications, infrastructure, and data.
Define and maintain technical security standards and work with technology teams to implement them across infrastructure, applications, cloud environments, and engineering processes.
Evaluate, select, implement, configure, and maintain security tools; ensure they are integrated, effective, and consistently used.
Establish and run vulnerability management processes, prioritize findings based on risk, and work with technical teams on remediation.
Build and improve application security, cloud security, identity and access management, endpoint protection, network security, and secure configuration practices.
Work with Engineering, DevOps, Cloud, IT, and Product teams to integrate security into software development, CI/CD pipelines, infrastructure changes, and system design.
Identify technical security weaknesses, assess their practical impact, prioritize mitigation, and implement proportionate security measures.
Develop operational procedures, automate repetitive security tasks, and improve the effectiveness and scalability of security operations.
Translate applicable regulatory and policy requirements into practical technical security measures with Risk and Compliance, while retaining first-line ownership of implementation.
Monitor security solutions, identify capability gaps, and develop a roadmap to strengthen the organization’s security capabilities.
Develop incident response capabilities, coordinate technical activities during security incidents, and turn lessons learned into concrete improvements.

Benefity

Real influence on shaping ZEN.COM.
Flexible working conditions.
Private medical healthcare.
Internal and external training opportunities.

Opieka zdrowotna

Szkolenia wewnętrzne

Inne informacje

The role is remote in Poland.

ZEN.COM

3 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz