HSBCJP00056913 (Cybersecurity) Head of Middleware Platform Security

Head of Middleware Platform Security

Location: Kraków / Warszawa ( 6days per month from office)

Area: Cybersecurity / Technology

Level: Senior Leadership

Model: B2B

About the role

We are looking for an experienced Head of Middleware Platform Security to join a global organization in the financial sector. This role is responsible for defining and driving the security strategy for middleware platforms at a global scale.

It combines deep technical expertise, leadership responsibilities, and close collaboration with stakeholders across technology, cybersecurity, and business functions.

Key responsibilities

• Define and maintain secure configuration baselines for middleware platforms, including:
  • IBM WebSphere Application Server, WebSphere MQ, WebSphere Portal
  • Apache HTTP Server, Apache Tomcat
  • Oracle WebLogic Server
  • nginx, Node.js
• Collaborate with middleware subject matter experts to:
  • establish security standards
  • develop and implement compliance checks
  • define remediation guidance
• Develop and execute a middleware security strategy aligned with:
  • enterprise and security architecture
  • regulatory expectations
  • industry best practices
• Own and prioritize the capability backlog based on business value
• Monitor performance through KPIs and security metrics
• Work closely with:
  • Service Owners and Technology/Platform Owners
  • Cybersecurity and Architecture teams
  • Audit and regulatory stakeholders
• Manage vendor relationships for owned technologies
• Support and respond to security incidents
• Own and manage selected risk, audit, and regulatory items

Leadership & collaboration

• Lead and develop a team of security professionals
• Foster a culture of innovation, collaboration, and continuous improvement
• Partner with senior leadership to align cybersecurity initiatives with business goals
• Manage budget and ensure effective resource allocation
• Influence global technology and security decisions

Requirements

• Minimum 5 years of hands-on experience with middleware technologies (e.g., WebSphere, WebLogic, Apache, nginx, Node.js)
• Proven experience in middleware platform security
• At least 2 years of experience leading technical teams
• Strong understanding of security standards, including CIS benchmarks
• Excellent stakeholder management skills
• Ability to translate complex technical topics into business-friendly language
• Strong analytical and problem-solving skills
• Experience managing budgets and resources
• Proactive, adaptable, and comfortable delegating and empowering teams

Nice to have

• Experience in regulated environments (e.g., financial services)
• Familiarity with global data protection regulations (e.g., GDPR)
• Experience working with auditors and regulators

What we offer

• A key leadership role in a global organization
• Real impact on cybersecurity strategy and platform security
• International, collaborative work environment
• Opportunity to build and grow a high-performing team
• Competitive compensation and benefits package - Luxmed and Multisport