CISO & Head of IT

About the Role

Description We are looking for an experienced, hands-on CISO & Head of IT to lead the company’s Information Security, Cybersecurity and IT domains. The role combines management, strategy and technical ownership and requires the ability to lead a team and company-wide initiatives while remaining technically involved when needed. Key Responsibilities • Lead and manage the IT & Information Security team, including task prioritization, professional development and day-to-day management. • Build annual and quarterly IT & Security work plans, define priorities and KPIs, track execution, manage budgets and report progress to management. • Define and continuously improve the company’s cybersecurity and IT strategy, architecture, policies and controls. • Own corporate IT infrastructure, including networks, server rooms, cloud environments, endpoints, operating systems, identity infrastructure and business applications. • Own IT service delivery and support operations, including ticket management, service levels, workload and backlog management, user satisfaction, service quality and continuous improvement of the employee IT experience. • Own Identity & Access Management, including SSO, MFA, access lifecycle, privileged access and least-privilege principles. • Manage network and infrastructure security, including firewalls, segmentation, VPN/remote access, monitoring and secure connectivity. • Oversee security operations, including security monitoring, endpoint security, vulnerability management, incident response and investigation. • Work closely with R&D, DevOps and Product teams on cloud security, application security, secure development practices and security architecture. • Own security governance, risk management and compliance programs, including audits, policies, risk assessments and remediation plans. • Lead business continuity, disaster recovery and cybersecurity exercises. • Manage third-party security risk, vendors, contracts, budgets and technology evaluations. • Represent Information Security in customer security reviews and work closely with management and other business stakeholders. Requirements Must Have • 7+ years of relevant experience in Information Security, Cybersecurity and/or IT infrastructure, including 3+ years in a leadership or management role. • Proven experience leading technical teams, including people management, delegation, prioritization and professional development. • Proven ability to build and execute annual and quarterly work plans, manage multiple projects and priorities, define KPIs and track execution. • Strong hands-on technical background and broad understanding of IT infrastructure, networking, IAM and cybersecurity. • Strong understanding of networking, firewalls, segmentation, VPN, DNS, certificates and secure remote access. • Strong knowledge of IAM and authentication concepts, including SSO, MFA, SAML/OIDC, RBAC and access lifecycle management. • Experience managing corporate IT environments, endpoints and IT service/support operations. • Experience with security operations, monitoring, incident response and vulnerability management. • Experience with information security governance, risk management, policies and security audits. • Strong project, vendor and budget management capabilities. • Excellent communication skills and ability to work effectively with technical teams, employees, customers and senior management. • Independent, pragmatic and execution-oriented, with strong problem-solving and decision-making capabilities. Advantages • Experience managing cloud environments, particularly GCP and/or Azure. • Experience with ISO 27001 and SOC 2 implementation, certification and audit processes. • Experience managing server rooms, virtualization and hybrid cloud/on-prem environments. • Experience with Windows, macOS and Linux environments and enterprise endpoint management. • Understanding of DevOps, Kubernetes, containers, CI/CD and modern application security. • Experience with SIEM, EDR and security automation. • Experience in a technology/SaaS company working closely with R&D and DevOps teams. • Experience leading Business Continuity, Disaster Recovery and cybersecurity exercises.