EU Information Security Officer 🌍

Location
Contract Type
Full-time
Salary
110 000 - 130 000 Kč
Work from home
Partial work from home
Published
Reference
1000486
Job description

🌍 EU Information Security Officer (ISO) – based in Prague

We are looking for a seasoned Regional Information Security Officer (RISO)

You’ll be the go-to security authority for Europe, ensuring our digital assets remain secure and fully compliant with all relevant regulations and standards.

✨ Why this role stands out

💡 Strategic influence: Shape the regional security strategy during a major digital transformation

🤝 High visibility: Collaborate closely with global leadership, regional IT, and business stakeholders

💖 Culture that cares: Values-driven environment (tolerance, courage, honesty, loyalty) and Great Place to Work certified 🏆

Workplace: Prague with home office 2x a week

Contract: HPP/full-time for an unlimited period

🛡️ Key responsibilities:

  • Develop and implement a regional cybersecurity strategy aligned with global policies
  • Identify, assess, and mitigate security risks specific to the European region
  • Oversee the deployment and management of security technologies and tools
  • Monitor security incidents, coordinate incident response, and lead the regional IR team
  • Conduct security audits, vulnerability scans, and penetration tests
  • Ensure compliance with GDPR, NIST, ISO 27001, DORA, CCPA, HIPAA and internal policies
  • Maintain regional security policies, procedures, and guidelines
  • Drive secure design practices across all IT/OT projects
  • Promote the use of CyberVadis and other security assurance tools
  • Partner with regional IT teams, business units, and external vendors to embed security in processes
  • Communicate security risks, compliance status, and incidents to leadership
  • Lead post-incident investigations and implement corrective actions
  • Organise security awareness trainings and education programs for employees
  • Serve as the main security contact for plant directors, site leaders, and industrial cybersecurity reps
  • Occasional travel within Europe ✈️
Requirements

🎓 What you bring:

University degree in Information Security, Computer Science, or related field (Master’s is a plus)

5–7+ years in information security, including 2–3 years in a leadership role

Certifications like CISSP, CISM, CISA (or equivalent)

Deep understanding of security principles, practices, and technologies

Hands-on experience with security frameworks (NIST, ISO 27001)

Strong analytical, decision-making, and project leadership skills

Ability to manage multiple priorities in a complex environment

Excellent communication and stakeholder management skills

Fluent English (another European language is a plus)

Benefits

💎 What’s in it for you

⏰ Flexible working hours with core time for collaboration

🌴 5 weeks of vacation + additional paid days off beyond that

🍽️ Meal voucher card to keep you fuelled

🏋️ MultiSport card for unlimited fitness and wellness access

🛍️ Employee discounts on company products

💬 Language courses to boost your skills

💰 Contribution to your pension plan for future security

🎉 Regular team-building events and social activities

🤝 Referral bonus for recommending new colleagues

🎁 Anniversary gifts to celebrate your milestones

Other notes
For more related job opportunities visit https://www.grafton.cz/en/job-search