Head of Information Security (Remote/Hybrid)

About the role

We are seeking a Head of Cybersecurity to expand and lead our security function across application security, compliance, infrastructure & cloud security, and business application security. This hands‑on leadership position requires setting strategic direction, representing security at the executive level, and diving into technical details with engineering, IT, and compliance teams.

Key responsibilities

• Build and run an Application Security program, including AI‑assisted code reviews, CI/CD integration, and developer training.
• Own ISO 27001 and SOC 2 certifications, manage ongoing audits, and develop roadmaps for additional certifications.
• Secure Kubernetes and cloud environments, define IaC security standards, and partner with DevOps on secure‑by‑default configurations.
• Protect Microsoft 365, CRM, ERP and other line‑of‑business systems, manage identity, access, and data‑protection controls, and oversee third‑party SaaS risk.

Required profile

• 8+ years of information security experience, including at least 3 years in a leadership role, preferably in remote or hybrid international organisations.
• Proven track record delivering application security programmes with CI/CD tooling and AI‑assisted reviews.
• Hands‑on experience leading ISO 27001 and/or SOC 2 audits to successful certification.
• Experience securing business applications (M365, CRM, ERP) and managing vendor risk.
• Ability to communicate risk and trade‑offs clearly to engineers and executives.

Required skills

• Application security
• CI/CD pipeline integration
• AI‑assisted code review
• ISO 27001
• SOC 2
• Microsoft 365
• CRM and ERP security
• Kubernetes
• Cloud security (including sovereign cloud)
• Vendor risk management

What we offer

• Choice of work equipment (laptop, monitor, etc.)
• English classes (iTalki – $130 monthly)
• Flexible schedule (typically 09:00‑19:00)
• Newborn bonus (€500 per child)
• Patent remuneration
• Paid leave
• Remote work or hybrid model (2 days office, 3 days remote)