Chief Information Security Officer

Brak informacji o wynagrodzeniu

C-Level / ManagerOn-site·WrocławFull-time

#476322·Dodano 2 dni temu·0

Źródło: Centra

Aplikuj teraz

Tech Stack / Keywords

ISO 27001ISMSIAMGoogle WorkspaceMDMSaaScloudpenetration testingAI

Podsumowanie oferty

Lead information security for Centra’s ecommerce SaaS platform, owning its ISO 27001-certified ISMS and security governance. Partner with engineering and executive leadership on product and infrastructure security, risk management, and incident response.

Wymagania

Essentials:

Hold a valid ISO 27001 Internal Auditor or Lead Auditor certification, with proven experience building, documenting, and independently auditing an ISMS.
Have a track record of collaborating directly with C-suite executives, aligning security priorities across non-technical departments, and clearly communicating risk at a strategic level.
Have experience integrating security requirements into SaaS product lifecycles and product roadmaps, working closely with engineering leadership to drive execution.
Be able to evaluate the operational effectiveness of controls beyond paper compliance, balancing security rigor with usability and business speed.
Have experience establishing governance, policies, and risk evaluation frameworks for AI tooling and integrations.

Nice to have:

Hands-on experience in technical engineering or IT roles, such as Software Engineer, DevOps, or Systems Administrator, and familiarity with Google Workspace administration.

Obowiązki

ISMS Ownership & Audit Compliance:

Own and continuously improve Centra’s ISO 27001-certified Information Security Management System (ISMS).
Manage internal, external, customer, and certification audit processes.

Product & Infrastructure Security Governance:

Define and enforce practical security standards for the Centra Platform, cloud environments, and internal systems.
Partner with the CTO and Engineering leadership on security architecture, vulnerability management, and penetration testing.

Enterprise Sales Enablement & Vendor Risk:

Lead prospective customer security evaluations and manage contractual security requirements to support upmarket growth.
Oversee third-party vendor security reviews, including SaaS platforms and emerging AI tooling.

Risk Management & Incident Response:

Drive the information security risk management lifecycle by identifying, treating, and monitoring threats.
Coordinate incident response, root-cause investigations, and remediation.

Access Control & IT Security Supervision:

Oversee identity and access management (IAM), privileged access reviews, and endpoint protection fleet management.
Oversee security configurations across core IT infrastructure, including Google Workspace and MDM.

Security Metrics, Awareness & Executive Reporting:

Establish security KPIs and lead organizational security awareness initiatives.
Report risks, incident trends, and ISMS performance directly to executive leadership.

Inne informacje

The recruitment process consists of an introductory interview with a recruiter (online, 30–45 minutes), a technical interview (online or onsite, 1 hour), and a Ways of Working & Executive Interview (online, 1 hour).

Centra

3 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz