Head of Security

Technologies we use

About the project

This is how we organize our work

This is how we work

Team members

Your responsibilities

• Make us ready for an incident. Scenarios, roles, decision paths, tabletop exercises with management and production. Put logging and evidence handling in place so that after an incident we can actually answer “what exactly got out”.
• Get us qualified to handle top-tier confidential material. Map the licensor’s requirements against what we have, identify the gaps and close them — including how material moves between us and external contributors.
• Put our external collaboration in order. Risk tiers, contractual security requirements, onboarding and offboarding, working models that don’t leave copies on other people’s machines.
• Lock down what’s critical. Publishing accounts, build signing keys, production environment access.
• Take us through SOC 2 — from agreeing scope, through selecting an auditor and a compliance platform, to the report.
• Choose and roll out the baseline stack — device management, endpoint protection, email, code and secret scanning. What we buy is your call.
• Work with producers and developers so that they want to work with you rather than around you.

Our requirements

• You’ve built security in a company that didn’t have it, or you were the first security hire in a growing organisation.
• You’ve run a real incident — not an exercise. You’ll tell us what you did in the first hour and what went wrong.
• You’ve worked with data or material whose leak carried contractual consequences — games, media, SaaS, finance, anywhere.
• You’ve been through a SOC 2 or ISO 27001 audit as the person accountable for it, not as a participant.
• You can pick a tool and justify its cost, not just name vendors.
• You explain technical things to non-technical people without acronyms and without condescension.
• English fluent in writing and conversation — our auditor and part of the company work in English. Polish is useful but not required.

Optional

• Experience with content licensor security requirements — MPA Content Security Best Practices, TPN, studio security addenda.
• Working with distributed external contributors and remote workstation models (VDI).
• Games or media — understanding what a pre-release leak actually costs.

What we offer

• Full ownership of your area, reporting directly to the COO.
• A budget for tooling and for the audit — we’ll discuss actual figures in the first conversation.
• A budget for outside help: consultants, pentests, SOC 2 advisory. We don’t expect you to do all of it alone.
• An exhilarating role in the mobile RPG gaming industry.
• Flexible employment terms: employment contract or B2B.
• Work environment of your choice: remote, in-office, or a hybrid model.
• A competitive benefits package tailored to your needs.
• A modern office space equipped with everything you need to succeed.
• Salary range: 25 000 - 30 000 PLN.

Benefits