CISO & Head of IT

We are looking for an experienced, hands-on CISO & Head of IT to lead the company’s Information Security, Cybersecurity and IT domains.

The role combines management, strategy and technical ownership and requires the ability to lead a team and company-wide initiatives while remaining technically involved when needed.

Key Responsibilities

• Lead and manage the IT & Information Security team, including task prioritization, professional development and day-to-day management.
• Build annual and quarterly IT & Security work plans, define priorities and KPIs, track execution, manage budgets and report progress to management.
• Define and continuously improve the company’s cybersecurity and IT strategy, architecture, policies and controls.
• Own corporate IT infrastructure, including networks, server rooms, cloud environments, endpoints, operating systems, identity infrastructure and business applications.
• Own IT service delivery and support operations, including ticket management, service levels, workload and backlog management, user satisfaction, service quality and continuous improvement of the employee IT experience.
• Own Identity & Access Management, including SSO, MFA, access lifecycle, privileged access and least-privilege principles.
• Manage network and infrastructure security, including firewalls, segmentation, VPN/remote access, monitoring and secure connectivity.
• Oversee security operations, including security monitoring, endpoint security, vulnerability management, incident response and investigation.
• Work closely with R&D, DevOps and Product teams on cloud security, application security, secure development practices and security architecture.
• Own security governance, risk management and compliance programs, including audits, policies, risk assessments and remediation plans.
• Lead business continuity, disaster recovery and cybersecurity exercises.
• Manage third-party security risk, vendors, contracts, budgets and technology evaluations.
• Represent Information Security in customer security reviews and work closely with management and other business stakeholders.

Requirements

Must Have

• 7+ years of relevant experience in Information Security, Cybersecurity and/or IT infrastructure, including 3+ years in a leadership or management role.
• Proven experience leading technical teams, including people management, delegation, prioritization and professional development.
• Proven ability to build and execute annual and quarterly work plans, manage multiple projects and priorities, define KPIs and track execution.
• Strong hands-on technical background and broad understanding of IT infrastructure, networking, IAM and cybersecurity.
• Strong understanding of networking, firewalls, segmentation, VPN, DNS, certificates and secure remote access.
• Strong knowledge of IAM and authentication concepts, including SSO, MFA, SAML/OIDC, RBAC and access lifecycle management.
• Experience managing corporate IT environments, endpoints and IT service/support operations.
• Experience with security operations, monitoring, incident response and vulnerability management.
• Experience with information security governance, risk management, policies and security audits.
• Strong project, vendor and budget management capabilities.
• Excellent communication skills and ability to work effectively with technical teams, employees, customers and senior management.
• Independent, pragmatic and execution-oriented, with strong problem-solving and decision-making capabilities.

Advantages

• Experience managing cloud environments, particularly GCP and/or Azure.
• Experience with ISO 27001 and SOC 2 implementation, certification and audit processes.
• Experience managing server rooms, virtualization and hybrid cloud/on-prem environments.
• Experience with Windows, macOS and Linux environments and enterprise endpoint management.
• Understanding of DevOps, Kubernetes, containers, CI/CD and modern application security.
• Experience with SIEM, EDR and security automation.
• Experience in a technology/SaaS company working closely with R&D and DevOps teams.
• Experience leading Business Continuity, Disaster Recovery and cybersecurity exercises.