EU remote
Interim Head of Information Security
About this role
N-iX is a global software development company founded in 2002, connecting over 2,400+ tech professionals across 40+ countries. We deliver innovative technology solutions in cloud computing, data analytics, AI, embedded software,IoT, and more to global industry leaders and Fortune 500 companies. Join us to create technology that drives real change for businesses and people across the world. Currently, we are looking for experienced Interim Head of Information Security who will shape and lead Client`s security strategy.
In this role you report to the VP IT & Infrastructure and collaborate closely with Engineering, Legal, and Compliance teams. This role offers the opportunity to further develop the client’s Information Security function into a proactive, engineering-aligned capability that supports secure software development (“secure by design”), ensures readiness for audits such as PCI-DSS and SOC 2, and strengthens company resilience in an evolving threat landscape.
We are looking for a leader with strong technical credibility, a pragmatic mindset, and experience working in software-driven environments. The position is temporary ( 4–6 months), and we are open to both full-time and part-time arrangements. Responsibilities: Ownership and continuous improvement of overall security posture, ensuring transparency of the security risk landscape through clearly defined and measurable KPIs.
Definition and proactive evolution of the company’s information security strategy in alignment with business objectives and the evolving threat landscape. In close collaboration with Engineering, integration of security into software development (SDLC) and platform operations, promoting secure-by-design principles across the organization. Establishment of pragmatic security standards and guardrails, providing clear, risk-based guidance to support prioritization of security initiatives and enable teams to implement secure solutions effectively.
Preparation of the organization for regulatory and audit requirements such as PCI-DSS and SOC 2 by translating compliance expectations into practical and scalable controls. Strengthening of capabilities for detecting and responding to security threats by promoting appropriate logging, monitoring, and alerting practices across applications and infrastructure. Evaluation and implementation of security technologies aligned with architecture and engineering workflows, including contributions to build-versus-buy decisions to ensure scalable and maintainable solutions.