Head of Information Security

**Location - Prague, Czech Republic

Experience - 7 years** About The Role We are seeking an experienced Regional Information Security Manager to lead cybersecurity governance and information security initiatives across multiple business entities in Eastern Europe. The successful candidate will be responsible for implementing regional security strategies, managing cyber risk, ensuring compliance with global security standards, and collaborating closely with business leaders, IT teams, and regional stakeholders to protect critical information assets. Strong leadership, cybersecurity governance, and risk management expertise are essential.

Key Responsibilities

• Implement and manage the regional information security strategy aligned with global security policies.
• Oversee cybersecurity governance across multiple countries and operational entities.
• Identify, assess, and mitigate cybersecurity risks through effective security controls and risk treatment plans.
• Coordinate security initiatives with corporate security and local IT teams.
• Ensure compliance with security standards including ISO 27001, NIST, PCI-DSS, and organizational policies.
• Lead information security, business continuity, operational resilience, and physical security initiatives.
• Coordinate vulnerability assessments, penetration testing, and remediation activities.
• Develop and maintain security roadmaps, policies, procedures, and operational processes.
• Advise senior leadership on cybersecurity risks, compliance, and strategic security improvements.
• Manage security budgets, investments, reporting, and continuous improvement initiatives.
• Support incident management, threat response, and cyber resilience planning.
• Provide security awareness, guidance, and training to business stakeholders and local teams.

Requirements

• Minimum 7 years of experience in Information Security, Cybersecurity, or IT Security Management.
• Strong expertise in cybersecurity governance, risk management, and security operations.
• Hands-on knowledge of network security, firewalls, VPNs, endpoint security, vulnerability management, and penetration testing.
• Good understanding of ISO 27001, NIST, PCI-DSS, and other industry security frameworks.
• Experience developing security strategies, roadmaps, and risk mitigation plans.
• Proven leadership and stakeholder management experience across regional or multinational environments.
• Excellent written and verbal communication skills in English.
• Professional certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
• Strong analytical, problem-solving, and decision-making skills.
• Willingness to travel occasionally within the assigned region.