Holding Security Officer

For a major international insurance group, we are looking for a senior Security Officer with an overlap into operational resilience (BCM and DORA), for a key role in managing IT security at its regional headquarters and coordinating security teams across several countries.

What you'll do:

• Take ownership of critical asset security and ensure alignment with Group security standards.
• Coordinate security testing and vulnerability management, including oversight of remediation.
• Monitor security KPIs and risks and manage the related action plans.
• Contribute to business continuity management (BCM) and DORA operational resilience requirements.
• Act as the main point of contact for security audits and oversee the closure of findings.
• Assess supplier security, coordinate security initiatives across the region and report regularly to management.

What you should have:

• 8+ years of experience in information / cyber security, including at least 2 years as a security officer, in security governance or in security consulting within financial services.
• Knowledge of ISO 27001 / NIST CSF, DORA, BCM (ISO 22301) and the security aspects of GDPR.
• Experience managing penetration testing and vulnerability management.
• Knowledge of cloud and identity security (Microsoft Entra ID / M365, Azure) and of WAF and EDR concepts.
• CISSP, CISM, CISA or ISO 27001 Lead Implementer / Auditor certification.
• Experience communicating with senior management, security teams and auditors, and reporting to management.
• Fluent English.

Nice to have

• Experience in an international, multi-country environment.
• ISO 22301 or a cloud security certification.

What we offer

• A key security role with a leading client in the insurance sector.
• Long-term cooperation with an option to extend.
• The opportunity to become a member of Projectman, the largest community of freelance project managers, business analysts and designers in the Czech Republic and Slovakia.
• Full support throughout the project, including onboarding, mentoring and regular feedback.
• Networking, educational and social events for your professional development.

Location

• Prague / hybrid (at least 2 days a week on site, plus home office)