Head of Cyber

We are looking for a Head of Cybersecurity who will be responsible for establishing and maintaining Ammega’s vision, strategy, and program to ensure that information assets and technologies are adequately protected. This leadership role involves identifying, assessing, and mitigating security risks while driving innovation and compliance across the organization’s IT assets. The role will manage, guide, and support the respective teams and promote security awareness across the organization.

The Position can be based in Katowice (Poland) or Mathi (Italy)

The scope and dimension of this role are including:

- Establish and maintain the cybersecurity strategy, govern programs, and set up services to ensure that information assets and technologies are adequately protected.
- Lead a team of professionals to safeguard systems from cyber threats, cooperate with other functions, and ensure that security best practices are integrated into business and ICT operations.

Accountabilites:

- **Strategy & Leadership**: Formulate and execute a comprehensive cybersecurity strategy aligned with organizational goals, ensuring effective protection against evolving threats and vulnerabilities.
- **Incident response**: Oversee the development and implementation of robust incident response plans, ensuring rapid and effective management of security incidents and minimizing impact on the organization.
- **Compliance**: Ensure adherence to relevant cybersecurity regulations and standards, managing audits and compliance requirements to safeguard the organization’s data and systems.
- **Risk Management**: Oversee risk assessments to identify and address potential security weaknesses, implementing proactive measures to mitigate risks and enhance the overall security posture. Reduce the risk by setting up rigid, sustainable patching process.
- **Tools & Architecture**: Oversee the development and maintenance of secure architecture, tools and systems to safeguard the company’s digital assets. Recommend IT landscape changes and required technology modernization.
- **Vendor management**: Evaluate, manage, and oversee security risks related to third-party vendors and service providers. Collaborate with procurement and legal teams to ensure that contracts and agreements reflect security standards and practices.
- **Budget management**: Develop and manage the cybersecurity budget, ensuring the optimal allocation of resources to achieve strategic objectives.
- **Best Practices, culture of sharing**: Collaborate with ICT to ensure the implementation of security best practices in IT systems and software development.
- **Security Awareness**: Drive security awareness programs and training for employees at all levels.
- **Disciplined execution**: Provide high-level guidance and support to managers, ensuring effective execution of cyber strategies and programs. Align Cybersecurity objectives with organization's strategy.

**Requirements**:

- Proven ability to manage and guide technical teams in the field of cybersecurity.
- Strong knowledge of cybersecurity, with experience in practically adopting widely recognized standards or frameworks such as ISO27001, NIST, SOC 2, CIS Controls, or alternatives.
- Relevant certifications, such as CISSP, CISM, CEH, CRISC, or CISA, are an asset.
- Excellent skills in conveying technical concepts to leadership and stakeholders, fostering collaboration and alignment.
- Analytical approach, using data to drive strategic decisions and enhance cybersecurity and IT operations.