IT Security Head – Part Time

This is a fully remote position, open to applicants in Czechia.

📋 Description

• Develop and refine a vision, strategy, and charter for information security that aligns with organizational goals.

• Lead the establishment of an information security governance framework, including an information security steering committee or advisory board.

• Create and sustain a cohesive, risk-based control framework that integrates global laws, standards, and regulations.

• Coordinate information security risk assessment and management processes in collaboration with various business units and functions.

• Foster internal relationships among information security stakeholders across IT, product development, compliance, audit, physical security, procurement, legal, and HR.

• Establish and oversee an information security management framework based on ISO 2700X standards.

• Set metrics and reporting mechanisms to evaluate program efficiency and effectiveness, providing updates to enterprise risk teams, senior business leaders, and the board.

• Ensure the consistent application of policies and standards across all technology projects, systems, and services.

• Manage IT Security technologies concerning threat and vulnerability management, security monitoring, identity and access management, and data loss prevention.

• Execute, enhance, and report on controls in line with internal security standards and regulatory requirements.

• Evaluate IT projects, changes, and exceptions from an information security perspective.

• Collaborate with stakeholders to achieve long-term security strategy goals and oversee security-risk controls.

• Conduct technical security reviews to ensure compliance with standards, regulations, and best practices.

• Assist in investigations of Data Leakage Prevention incidents and enhance the DLP program.

• Organize assurance tests, including penetration tests, and ensure remediation of identified issues.

• Create and maintain security documentation, including hardening standards, methodologies, and procedures.

• Conduct e-discovery searches and investigations as necessary.

• Support the coordination of IT audits.

⛳️ Requirements

• Minimum of 3 years of experience in IT Security.

• Bachelor's degree in Computer Science or a related field in IT Security.

• Familiarity with international security standards and frameworks such as NIST, CIS, ISO27001, etc.

• Strong grasp of IT Security architecture concepts, technologies, and best security practices.

• Self-driven and focused on delivering results; capable of working independently while managing multiple projects and effectively prioritizing tasks.

• Excellent team collaboration and communication skills; must be a team player and able to interact effectively with other members of the TFL IT team.

• Strong analytical and problem-solving abilities.

• Willingness to provide a recent criminal record extract (not older than three months).

🏝️ Benefits

• A diverse range of activities, tasks, and projects.

• Fishing for Friends program – our referral initiative.

• Opportunities for further development and professional growth.

• A friendly and international working atmosphere.