Head of Middleware Platform Security
Head of Middleware Platform Security
Location: Kraków / Warszawa ( 6days per month from office)
Area: Cybersecurity / Technology
Level: Senior Leadership
Model: B2B
About the role
We are looking for an experienced Head of Middleware Platform Security to join a global organization in the financial sector. This role is responsible for defining and driving the security strategy for middleware platforms at a global scale.
It combines deep technical expertise, leadership responsibilities, and close collaboration with stakeholders across technology, cybersecurity, and business functions.
Key responsibilities
Define and maintain secure configuration baselines for middleware platforms, including:
IBM WebSphere Application Server, WebSphere MQ, WebSphere Portal
Apache HTTP Server, Apache Tomcat
Oracle WebLogic Server
nginx, Node.js
Collaborate with middleware subject matter experts to:
establish security standards
develop and implement compliance checks
define remediation guidance
Develop and execute a middleware security strategy aligned with:
enterprise and security architecture
regulatory expectations
industry best practices
Own and prioritize the capability backlog based on business value
Monitor performance through KPIs and security metrics
Work closely with:
Service Owners and Technology/Platform Owners
Cybersecurity and Architecture teams
Audit and regulatory stakeholders
Manage vendor relationships for owned technologies
Support and respond to security incidents
Own and manage selected risk, audit, and regulatory items
Leadership & collaboration
Lead and develop a team of security professionals
Foster a culture of innovation, collaboration, and continuous improvement
Partner with senior leadership to align cybersecurity initiatives with business goals
Manage budget and ensure effective resource allocation
Influence global technology and security decisions
Requirements
Minimum 5 years of hands-on experience with middleware technologies (e.g., WebSphere, WebLogic, Apache, nginx, Node.js)
Proven experience in middleware platform security
At least 2 years of experience leading technical teams
Strong understanding of security standards, including CIS benchmarks
Excellent stakeholder management skills
Ability to translate complex technical topics into business-friendly language
Strong analytical and problem-solving skills
Experience managing budgets and resources
Proactive, adaptable, and comfortable delegating and empowering teams
Nice to have
Experience in regulated environments (e.g., financial services)
Familiarity with global data protection regulations (e.g., GDPR)
Experience working with auditors and regulators
What we offer
A key leadership role in a global organization
Real impact on cybersecurity strategy and platform security
International, collaborative work environment
Opportunity to build and grow a high-performing team
Competitive compensation and benefits package - Luxmed and Multisport
Why apply for an Antal job offer?
When your application is successful, you will be supported by a dedicated Consultant who will stay in regular contact with you (via email or phone), help you prepare for interviews with your future employer, and ensure a smooth and professional recruitment process.
About Antal
Antal is a leading recruitment and HR advisory company, present in Poland since 1996 and later expanded to the Czech Republic and Hungary. Across the CEE region, we employ around 150 professionals who deliver a full range of services - from specialist and executive recruitment, employee outsourcing and HR consulting, to employer branding and market research.
Our division-based structure combines deep industry expertise with functional specialisation, enabling us to provide tailored solutions for companies in every sector. We act as a trusted partner for both employers and candidates, sharing our knowledge and guiding them through every stage of the talent journey. We connect exceptional people with the right opportunities and help organisations build successful teams.