Head of Information Security & Compliance

Hiring via TechTree

This is a role that TechTree is recruiting for on behalf of one of its clients.

TechTree is an AI-driven recruitment platform working with high-growth companies.

When you apply TechTrees AI Agent matches you not just to this role but to other relevant opportunities across its network so one application can unlock multiple roles.

TechTrees client is hiring a Head of Information Security & Compliance to build and mature the security and compliance programme of a fast-growing international B2B SaaS group.

This is a senior hands-on role for a pragmatic security leader who can own certifications audits GDPR customer assurance incident response and group-wide security standards without adding unnecessary bureaucracy.

• Locations: Warsaw or Kraków Poland
• Work model: Hybrid typically 23 days/week in office
• Employment: Full-time
• Estimated compensation: annually
• Level: Director / Head of

What youll own

• Lead ISO 27001 and Cyber Essentials Plus across multiple entities
• Own the ISMS policies controls evidence audits and recertification cycles
• Integrate newly acquired businesses into a consistent security framework
• Manage GDPR compliance across multiple European jurisdictions
• Own customer security assurance questionnaires due diligence and security terms
• Join customer conversations where security is critical to closing deals
• Lead incident response post-mortems and remediation
• Own business continuity and disaster recovery standards and testing
• Set security baselines for endpoints and internal business systems
• Maintain the risk register access reviews and control-testing programme
• Manage external security vendors penetration testers MSPs and cyber-insurance relationships
• Report security posture and risk directly to executive stakeholders

• Experience as the most senior information security / compliance leader in a B2B SaaS environment
• Proven ability to operate as a hands-on individual contributor
• Experience taking ISO 27001 through a full audit cycle
• Strong practical GDPR experience across multiple jurisdictions
• Experience building or maturing security programmes in fast-scaling organisations
• Commercial mindset and confidence working with customers auditors and executives
• CISSP CISM or equivalent certification
• Strong professional English

• Experience in scaling SaaS businesses
• Cyber Essentials Plus experience
• Security integration following M&A or acquisitions
• Experience across multi-entity organisations
• Professional Polish
• Customer-facing security and enterprise deal-support experience

• Own the security function for an international SaaS group
• Build the programme rather than inherit a mature structure
• Direct access to executive leadership
• High visibility across compliance customers and commercial operations
• Significant autonomy and ownership
• Hybrid flexibility in Warsaw or Kraków
• Private healthcare sport card life insurance and annual training budget

If this sounds like a fit wed love to hear from you. Apply today!