Group Information Security Officer

Who are we?

PWO group is a global company in the mobility industry, that takes the lead in shaping the environmentally friendly mobility of the future through innovations and is entirely independent of combustion engines. With our expertise in climate friendly light weight construction, we are technology leaders and combine economic efficiency with sustainability. We develop and produce sophisticated metal components and complex subsystems at the frontiers of what is technologically possible.

Our corporate strategy is summed up by the slogan PEOPLE. PLANET. PROGRESS.

Job title: Group Information Security Officer (m/f/d)

Location: Čačak, Serbia

The Group Information Security Officer (ISO) leads the global information security function across all PWO Group sites.

This role ensures that information security is effectively governed, managed, and continuously improved in alignment with Group strategy, TISAX requirements, and international standards (ISO/IEC 27001).

Operating from the Share Competence Center in Čačak, the Group ISO defines and oversees the Information Security Management System (ISMS), collaborates with IT, business functions, and site management worldwide, and drives the culture of information security across the entire organization.

Your responsibilities encompass:

Strategic Governance on Information Security and Data

• Develop, maintain, and continually improve the Group ISMS covering all subsidiaries and locations.
• Establish and enforce PWO Group information security policies, standards, and guidelines.
• Advise the Group security posture, risks, and investment priorities.
• Define and track key information security KPIs and performance indicators.
• Ensure compliance with TISAX, ISO 27001, GDPR, and relevant local regulations.
• Conduct self-assessments, monitor, identify, analyze cyber risks
• Identification/definition of critical assets

Operational Security and Automation

• Good or deep understanding of AI and/or Power Automate for automation manual tasks, audits etc…
• Oversee technical and organizational measures implementation globally.
• Support IT teams in creation of technical definitions and instructions for securing network, systems, and applications
• Collaborate with IT team with identity management, access control, and incident response procedures.
• Ensure timely response and resolution of security incidents and vulnerabilities.

Coordination & Leadership

• Coordinate a network of local Information Security Officers and Champions at each site.
• Collaborate with IT Infrastructure, Governance, Legal, HR, and Business Units.
• Represent PWO Group in communication with customers, auditors, and authorities regarding information security topics.

Awareness & Culture

• Drive global awareness programs to strengthen the information security culture.
• Conduct training for management, employees, and IT administrators.
• Integrate information security requirements into onboarding, procurement, and supplier management processes.

Qualifications and Requirements

Education & Experience

• University degree in Computer Science, Information Security, or a related discipline.
• Minimum 5–7 years of professional experience in information security
• Proven experience in implementing and maintaining an ISMS (TISAX or ISO 27001).
• Experience in the automotive or manufacturing industry is a strong asset.
• Relevant certifications (e.g., CISM, CISSP, ISO 27001 Lead Implementer/Auditor) are an advantage.

Skills & Competencies

• Strong understanding of IT security, and good governance, risk management understanding
• Excellent leadership and stakeholder management skills across diverse cultures.
• Analytical and structured mindset with high attention to detail.
• Excellent communication in English.
• Ability to work strategically while managing operational topics.