Information Security Lead (OT Security, Video Data Privacy & SOC 2)
Added: 15.09.2026
Multiple locations
Region: Europe
Your responsibilities:
- Define how cameras, on-site devices and equipment integrations connect into customer OT networks — including the paths that send commands to machines: segmentation, firewall rules, outbound-only cloud connectivity, secure remote access, hardening and patching.
- Be the security voice with customers’ IT, OT and security teams — questionnaires, architecture reviews, network requirement documents and calls.
- Lead SOC 2, building on the existing ISO 27001-aligned security programme: gap assessment, controls mapped to the Trust Services Criteria, policies, evidence collection, and the work with the auditor and compliance tooling.
- Own privacy for video and image data: DPIAs, data-flow maps, retention and deletion, access control, rules for footage used to train AI models, and evidence that the platform’s anonymisation of people holds up — plus customer-facing documents (DPA, sub-processor list, technical and organisational measures).
- Help customers through workplace-camera rules — works councils and national employee-monitoring law.
- Own the security risk register, vendor risk and incident-response plan; advise engineering on the controls SOC 2 needs in cloud and development practice.
We are looking for you, if you have:
We don’t expect equal depth in all three areas — strong in two and credible in the third is the profile.
- 6+ years in information security, including hands-on implementation: you have built and run controls, not only assessed them.
- SOC 2 — took a product or SaaS company through a SOC 2 audit (Type I or II) in a hands-on role, ideally extending an existing ISO 27001 programme. Hands-on ISO 27001 implementation plus a clear grasp of what SOC 2 adds is a close substitute.
- OT / industrial network security — segmentation of plant or utility networks, zones and conduits or the Purdue model, IEC 62443, secure remote access, and securing third-party systems that signal or command PLCs and line equipment.
- Data privacy — GDPR in practice: DPIAs and privacy by design on real systems, ideally video, CCTV or other sensor data — including anonymisation and the use of personal data to train AI models.
- English at C1 — you write policies and customer-facing security documentation and hold your own with enterprise security teams.
- Pragmatic and independent; comfortable in a young company that needs results quickly.
Nice to have
- German.
- Certifications: CISSP, CISM, CISA, GICSP, ISA/IEC 62443, ISO 27001 Lead Implementer or Lead Auditor, CIPP/E.
- Swiss revFADP, NIS2, EU AI Act.
- Vanta, Drata or Secureframe.
- Cloud security on AWS, GCP or Azure; containers and Kubernetes.
- Background in manufacturing, machine vision, IIoT or video-surveillance products.
We offer:
- Participation in interesting and demanding projects.
- Flexible working hours.
- A great, non-corporate atmosphere.
- Possibility to work remote or hybrid (2 days per week from the office).
- Opportunities for development and promotion.
- Attractive package of benefits.
We reserve the right to contact the selected candidates.
Why is it worth joining TTMS?
Flexible working hours
Not everyone feels comfortable working the standard 9 a.m. to 5 p.m. hours. We have been successfully running projects for many years despite diversified work patterns.
Possibility of hybrid work
At TTMS, desk-to-desk work is what drives us, but we understand if someone prefers a hybrid model. We are equipped with all the necessary tools to work in a hybrid model.
Great, non-corporate atmosphere
Professionalism, attention to the quality of work and a friendly, informal atmosphere are not mutually exclusive. A flat structure and natural, friendly relationships create the basis for creativity and innovation.
Interesting, international projects
We create solutions for medium and large companies, we are present in Poland, Malaysia, Denmark, the UK, Switzerland, and India – the effects of your work will travel around the world. In TTMS you have an influence on the company’s success.
Together towards climate neutrality
We select subcontractors to minimize the carbon footprint, organize bush plantings, save peat bogs – all to achieve climate neutrality in 2025. We are glad that we are attracting more and more people who also care about sustainable development and environmental protection.
Friendly offices
Our offices are modern spaces that inspire employees and are environmentally friendly. Białystok is the kingdom of Marvel superheroes, Krakow is a soothing tropical forest, Wrocław is an art gallery, and the Lublin branch is a rock u0022hall of fameu0022.
Would you like to work for us?
Sending CV
Include information about technical skills, knowledge of programming languages and IT tools, and possibly experience in projects.
Phone Screening
The interview is aimed at assessing the candidate’s suitability for the position and verifying basic information from the CV. It is also an opportunity to discuss the candidate’s expectations and briefly present the job description and working conditions.
HR + technical meeting
We talk about the candidate’s professional experience, but also expectations regarding the new job. This is also the moment to check references and confirm the authenticity of the information provided, which allows you to get to know the candidate better and assess his fit with the company’s organizational culture.
Client company meeting
The candidate is introduced to the client. This stage aims to match the future employee to a specific project, taking into account both their technical skills and design preferences, which maximizes the chances of successful cooperation.
Employment
We sign an agreement that includes the terms of cooperation, scope of duties, remuneration and other key aspects of employment, such as the rights and obligations of both parties. From now on, the candidate becomes an official employee of the company.
Onboarding + first day of work
A comprehensive process of familiarizing a new employee with the organization, team and tools, aimed at making it easier for him to join work as quickly and effectively as possible. In TTMS, we use an internal e-Learning platform to conduct modern onboarding.
Our offices
Warsaw
The heart of our company and our command center
The Management Board of the company and management of individual business areas function here. On a daily basis, it is here that the most important, strategic and business decisions are made, as well as pro-ecological iniciatives. The Warsaw branch – located in Varso Tower – aims to be the first to create a fully eco-friendly office using renewable Energy and environmentally friendly materials, which is confirmed by the BREEM certificate.