Regional CISO Nordics & CEE (Cybersecurity)

TL;DR

Regional CISO Nordics & CEE (Cybersecurity): Leading security implementation and regulatory compliance across six entities in Nordics & CEE with an accent on NIS2 transposition and ISO 27001 implementation. Focus on translating regulatory obligations into practical controls and managing security operations across multiple jurisdictions.

Location: Hybrid in Bratislava, Slovakia. Must provide proof of eligibility to work in the European country you are applying for; sponsorship visas are not supported.

Company

An ecosystem of 60+ brands providing hosting and SaaS solutions to 3.3 million customers across Europe.

What you will do

• Translate NIS2 obligations into practical controls, processes, and documentation across entities in Slovakia, Hungary, Serbia, Czech Republic, Sweden, and Finland.
• Implement and operate the ISMS based on ISO 27001 and manage external audits and certifications.
• Collaborate directly with operations and software engineering teams to embed security requirements into infrastructure and software.
• Manage security incidents, conduct incident response drills, and own regional security awareness and training.
• Implement group security standards and policies, contributing to their evolution within the Security Management team.

Requirements

• Minimum 7 years of experience in IT security.
• Proven experience implementing and maintaining ISO 27001.
• Knowledge of security standards such as CIS Controls and NIST.
• English: B2 (clear written and spoken communication) required.
• Proof of eligibility to work in the European country of application (no sponsorship provided).

Nice to have

• Experience with NIS2 and GDPR legislation.
• Certifications such as CISSP, ISACA CISM, or ISO 27001 LI.
• Technical background in system administration or software development.

Culture & Benefits

• Inclusive environment that values respect, openness, and trusted collaboration.
• Opportunity to expand remit from regional implementation to broader group security impact.
• Collaborative environment working with a distributed European security management team.