D-ploy

IT infrastructure services and management consulting

IT Security Head

Security Governance, Risk & CompliancePosted on Nov 9

Part-timePrague, CzechiaNo salary listedRemote

About the Job

Requirements

At least 3 years of work experience in IT Security.
A bachelor's degree in Computer Science or an IT Security-related field.
Knowledge of international security standards and frameworks such as NIST, CIS, and ISO 27001.
A strong understanding of IT Security architecture concepts, technologies, and good security practices.
Ability to work independently, switch between several simultaneous projects, and prioritize work effectively.
Ability to interact effectively with other team members.
Strong problem-solving and analytical skills.
Willingness to provide a recent criminal record extract, no older than three months.

Responsibilities

Evolve an information security vision, strategy, and charter aligned with organizational priorities.
Direct an information security governance structure, including the formation of an information security steering committee or advisory board.
Develop and maintain a unified, risk-based control framework that integrates and normalizes requirements resulting from global laws, standards, and regulations.
Work with business units and functions to facilitate information security risk assessment and risk management processes, enabling them to own and accept risks appropriate to their risk appetite.
Create internal networks among information security stakeholders in IT, product development, corporate compliance, audit, physical security, procurement, legal, and HR management.
Implement and monitor a strategic, comprehensive information security management framework based on ISO 2700X to ensure appropriate confidentiality, integrity, availability, safety, privacy, and recovery of information assets.
Facilitate a metrics and reporting framework to measure program efficiency and effectiveness, and report regularly on status to enterprise risk teams, senior business leaders, and the board of directors.
Interact with related disciplines to ensure consistent application of policies and standards across technology projects, systems, and services.
Oversee implementation and use of IT Security technologies for threat and vulnerability management, security monitoring, identity and access management, and data loss prevention to mitigate cyber security risks effectively.
Execute, improve, and report on controls in accordance with internal security standards and regulatory requirements.
Participate in IT projects and operational processes, including change and exception management, to assess IT projects, changes, and exceptions from an IT security standpoint.
Liaise with stakeholders to meet long-term security strategy objectives and ensure security-risk controls are regularly monitored and reported.
Perform technical security reviews to ensure technologies comply with information security standards, regulatory requirements, and best practices.
Assist with Data Leakage Prevention incidents investigations and ongoing improvement of the DLP program.
Coordinate assurance tests, such as penetration tests, and remediation of issues.
Develop and maintain security documentation, including technical security hardening standards, methodologies, and procedures.
Perform e-discovery searches and investigations as required.
Assist in coordinating IT audits.

IT Security Head (Part time)

D-ploy · Prague, Czechia (Remote) · Part-time · Posted 2026-11-09

Workplace: remote

Department: DPI

Description

D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture.

We are looking for an HR Manager to join our team and take ownership of the day-to-day HR operations across our international locations. This is a hands-on, execution-focused position, perfect for someone who enjoys being directly involved in all aspects of HR administration, employee lifecycle management, and compliance.

It is a part-time remote position, approx. 16 hours in month with potential extension to some on-demand projects

What you’ll do

Evolves an information security vision, strategy and charter that is aligned to organizational priorities
Directs an information security governance structure, including the formation of an information security steering committee or advisory board
Develops and maintains a unified, risk-based control framework to integrate and normalize the requirements resulting from global laws, standards and regulations
Works effectively with business units and functions to facilitate information security risk assessment and risk management processes, and empowers them to own and accept the level of risk they deem appropriate for their specific risk appetite
Creates the necessary internal networks among information security stakeholders in IT, product development, corporate compliance, audit, physical security, procurement, legal and HR management teams.
Implements and monitors a strategic, comprehensive information security management framework based on (ISO) 2700X to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy and recovery of information assets
Facilitates a metrics and reporting framework to measure the efficiency and effectiveness of the program, providing regular reporting on the current status to enterprise risk teams, senior business leaders and the board of directors
Understands and interacts with related disciplines, to ensure the consistent application of policies and standards across all technology projects, systems and services
Oversee the implementation and the use of IT Security technologies relating to key security control areas such as threat and vulnerability management, security monitoring, identity and access management and data loss prevention to ensure an effective use of these technologies in mitigating cyber security risks.
Execute, improve and report on controls in accordance with internal security standards and regulatory requirements.
Play an active role in IT projects and operational processes (e.g., change management, exception management) to assess from an IT security standpoint IT projects, changes and exceptions.
Liaise with stakeholders to ensure long term security strategy objectives are met and controls addressing security risk are regularly monitored and reported
Perform technical security reviews to ensure technologies are in compliance with information security standards, regulatory requirements and best practices.
Assist with Data Leakage Prevention (DLP) incidents investigation and the ongoing improvement of the DLP programme
Coordinate assurance tests (e.g., penetration tests) and issues remediation
Develop and maintain security documentation including technical security hardening standards, methodologies and procedures
Perform e-discovery searches and investigations as required
Assist in the coordination of IT audits

Requirements

At least 3 years working experience in IT Security.
Bachelor’s degree in Computer Science or IT Security related fields
Knowledge of international security standards and frameworks such as NIST, CIS, ISO27001, etc.
Strong understanding of IT Security architecture concepts, technologies and good security practices
Self-motivated and delivery focused – the candidate must be able to work independently and switch between several simultaneous projects and effectively prioritise work
Team playing and communication skills – the candidate must be a team player and able to effectively interact with other team members of TFL IT
Strong problem solver and good analytical skills
Willingness to provide a recent criminal record extract (not older than three months).

Benefits

Broad range of activities, tasks, and projects
Fishing for Friends program – our referral program
Further development and professional advancement
Friendly and international working environment

Is IT in your DNA?

Apply

Apply at D-ploy

About the Company

D-ploy

IT infrastructure services and management consulting

D-ploy provides IT engineering and consulting services for global and regional customers, focusing on operational IT infrastructure, service management, program and project management, and quality management. It delivers both standard and tailored solutions to help clients achieve business goals, using established frameworks and certifications to ensure quality, reliability, and security. The company differentiates itself with a pragmatic, business‑oriented approach and long‑term partnerships, supported by a Europe/US cross‑regional footprint and a strong emphasis on customer needs. Its goal is to make IT an enabler of business value, improve work efficiency, and maintain compliant, dependable IT services while expanding expertise and geographic reach.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Lörrach, Germany
Founded: 2007

Recently Posted Jobs

Explore more opportunities at D-ploy

See more jobs