The Director of IT Security leads our company's corporate IT security function and oversees the day-to-day operation and continuous improvement of security controls across the organization.
The role operates within the IT strategy, budget, and governance framework. Leads the day-to-day security function and escalates strategic decisions and material approvals to IT ownership.
The role focuses on protecting our company's identities, endpoints, SaaS and AI environments, corporate systems, suppliers, and information assets, and partners with IT, Operations, R&D, Security, Compliance, Legal, and business stakeholders.
The role manages the IT Security team and builds a scalable function that strengthens security maturity, control coverage, compliance readiness, cyber resilience, and secure business operations.
Responsibilities
Lead and execute the corporate IT security roadmap and operating plan, and formulate IT Security procedures, standards, and security improvement initiatives, within the strategy and governance framework, in collaboration with the Director of IT.
Manage the IT Security team, starting with a Security Engineer, and support the function's continued growth.
Implement, operate, and improve security controls across identity and access management, endpoint security, DLP, SaaS, AI tools, and corporate systems, including access reviews, endpoint compliance, and secure configuration standards.
Own the corporate vulnerability-management lifecycle, including risk-based prioritization, remediation SLAs, remediation tracking, reporting, and escalation.
Lead the assessment and approval process for internal SaaS and AI tools, approving low- and medium-risk requests and escalating high-risk requests in collaboration with the Director of IT and the appropriate governance forum.
Define and manage IT Security requirements for suppliers, vendors, third parties, and enterprise platforms, and lead security reviews for corporate IT systems, coordinating with R&D Security when product or engineering environments are affected.
Maintain security monitoring, technical enforcement, control documentation, and audit evidence for IT controls.
Lead corporate cyber-resilience activities, including business continuity, disaster recovery, tabletop exercises, and ransomware readiness.
Support incident response for corporate IT Security events and coordinate with R&D Security on incidents affecting both corporate and R&D environments.
Provide IT Security subject-matter expertise for audits, customer security requests, and compliance activities, while overall security and customer-assurance ownership remains with the relevant organizational function.

We are looking for an experienced, hands-on CISO & Head of IT to lead the companys Information Security, Cybersecurity and IT domains.

The role combines management, strategy and technical ownership and requires the ability to lead a team and company-wide initiatives while remaining technically involved when needed.

Key Responsibilities
Lead and manage the IT & Information Security team, including task prioritization, professional development and day-to-day management.
Build annual and quarterly IT & Security work plans, define priorities and KPIs, track execution, manage budgets and report progress to management.
Define and continuously improve the companys cybersecurity and IT strategy, architecture, policies and controls.
Own corporate IT infrastructure, including networks, server rooms, cloud environments, endpoints, operating systems, identity infrastructure and business applications.
Own IT service delivery and support operations, including ticket management, service levels, workload and backlog management, user satisfaction, service quality and continuous improvement of the employee IT experience.
Own Identity & Access Management, including SSO, MFA, access lifecycle, privileged access and least-privilege principles.
Manage network and infrastructure security, including firewalls, segmentation, VPN/remote access, monitoring and secure connectivity.
Oversee security operations, including security monitoring, endpoint security, vulnerability management, incident response and investigation.
Work closely with R&D, DevOps and Product teams on cloud security, application security, secure development practices and security architecture.
Own security governance, risk management and compliance programs, including audits, policies, risk assessments and remediation plans.
Lead business continuity, disaster recovery and cybersecurity exercises.
Manage third-party security risk, vendors, contracts, budgets and technology evaluations.
Represent Information Security in customer security reviews and work closely with management and other business stakeholders.