CISO & Head of IT

We are looking for an experienced, hands-on CISO & Head of IT to lead the company’s Information Security, Cybersecurity and IT domains. The role combines management, strategy and technical ownership and requires the ability to lead a team and company-wide initiatives while remaining technically involved when needed. Key Responsibilities Lead and manage the IT & Information Security team, including task prioritization, professional development and day-to-day management. Build annual and quarterly IT & Security work plans, define priorities and KPIs, track execution, manage budgets and report progress to management. Define and continuously improve the company’s cybersecurity and IT strategy, architecture, policies and controls. Own corporate IT infrastructure, including networks, server rooms, cloud environments, endpoints, operating systems, identity infrastructure and business applications. Own IT service delivery and support operations, including ticket management, service levels, workload and backlog management, user satisfaction, service quality and continuous improvement of the employee IT experience. Own Identity & Access Management, including SSO, MFA, access lifecycle, privileged access and least-privilege principles. Manage network and infrastructure security, including firewalls, segmentation, VPN/remote access, monitoring and secure connectivity. Oversee security operations, including security monitoring, endpoint security, vulnerability management, incident response and investigation. Work closely with R&D, DevOps and Product teams on cloud security, application security, secure development practices and security architecture. Own security governance, risk management and compliance programs, including audits, policies, risk assessments and remediation plans. Lead business continuity, disaster recovery and cybersecurity exercises. Manage third-party security risk, vendors, contracts, budgets and technology evaluations. Represent Information Security in customer security reviews and work closely with management and other business stakeholders. Requirements: Must Have 7+ years of relevant experience in Information Security, Cybersecurity and/or IT infrastructure, including 3+ years in a leadership or management role. Proven experience leading technical teams, including people management, delegation, prioritization and professional development. Proven ability to build and execute annual and quarterly work plans, manage multiple projects and priorities, define KPIs and track execution. Strong hands-on technical background and broad understanding of IT infrastructure, networking, IAM and cybersecurity. Strong understanding of networking, firewalls, segmentation, VPN, DNS, certificates and secure remote access. Strong knowledge of IAM and authentication concepts, including SSO, MFA, SAML/OIDC, RBAC and access lifecycle management. Experience managing corporate IT environments, endpoints and IT service/support operations. Experience with security operations, monitoring, incident response and vulnerability management. Experience with information security governance, risk management, policies and security audits. Strong project, vendor and budget management capabilities. Excellent communication skills and ability to work effectively with technical teams, employees, customers and senior management. Independent, pragmatic and execution-oriented, with strong problem-solving and decision-making capabilities. Advantages Experience managing cloud environments, particularly GCP and/or Azure. Experience with ISO 27001 and SOC 2 implementation, certification and audit processes. Experience managing server rooms, virtualization and hybrid cloud/on-prem environments. Experience with Windows, macOS and Linux environments and enterprise endpoint management. Understanding of DevOps, Kubernetes, containers, CI/CD and modern application security. Experience with SIEM, EDR and security automation. Experience in a technology/SaaS company working closely with R&D and DevOps teams. Experience leading Business Continuity, Disaster Recovery and cybersecurity exercises.