Information Security & Quality Manager

In this role, you will be responsible for managing, maintaining, and developing the organization’s Information Security Management System (ISMS) and Quality Management System (QMS), ensuring continuous compliance with ISO/IEC 27001 and ISO 9001 standards across our regional hub in Poland.

You will focus on governance, risk management, compliance, and audit readiness while aligning local execution with group requirements, guidance, and processes from CF Security & Resilience (PSI Software SE). As a central coordinator, you will oversee policies, risk assessments, audit readiness, and foster a strong security culture across the company.

Your responsibilities

• Drive ISO Compliance: Own and improve our ISMS (ISO 27001) and QMS (ISO 9001) frameworks locally, keeping them aligned with global group standards.

• Lead Risk & Security Assessments: Run regular risk assessments, maintain the risk register, and evaluate the security impact of new systems and technologies.

• Be the Go-To Security Partner: Serve as the local point of contact for security and quality matters, fostering awareness and supporting cross-functional teams.

• Maintain Standards & Policies: Create, update, and streamline clear security and quality policies, procedures, and documentation.

• Coordinate Audits & Remediation: Act as the main coordinator for internal and external ISO audits, ensuring all findings and corrective actions are tracked and resolved.

Our Requirements

• 5–8 years of experience in information security, compliance, or risk management.

• Degree in Computer Science, IT, Cybersecurity, Engineering, or a related technical field.

• Hands-on experience with ISO 27001 and ISO 9001, from policy creation and risk assessments to running internal and external audits.

• Solid technical foundation in IT infrastructure, network security, and modern threat landscapes.

• Strong coordination and communication skills, with the confidence to work independently, manage stakeholders across teams, and handle sensitive data with high integrity.

Nice to have:

• Relevant industry certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer / Auditor.

• Familiarity with industrial cybersecurity standards (e.g. IEC 62443-4-1).

What we offer

• Long-term career development opportunities in an international organization

• The opportunity to create and develop proprietary PSI products

• Working alongside experienced specialists who are eager to share their knowledge

• Comfortable office amenities – shared rooms for just a few people, a chillout room, and parking spaces

• Job stability and security in a company with a 50-year tradition

• Flexible working hours and a friendly atmosphere without artificial hierarchy

• Clearly defined career development paths

• Technology conferences, professional training, and language courses (English and German)

• Benefits package – private medical care, group insurance, cafeteria benefit platform, and MultiSport card

Tech stack

• ISO 27001
• ISO 9001
• Risk Management
• Audit Management
• Information Security