Security & Compliance Leader
About FOTC
We’re FOTC – a team of cloud enthusiasts helping companies get the most out of Google Cloud and Google Workspace. Whether it’s moving to the cloud, building smarter workplaces, using AI, or just making everyday work easier — we’re here for it. We’ve been around for over 10 years, and in that time we’ve worked with more than 6,500 companies in 50+ countries.
Big names, small teams, startups, scaleups – you name it. From our offices in Wrocław, Warsaw, Bucharest, Budapest – or from wherever we’re working remotely – we help businesses grow with the right tech. We’re a Google Cloud Premier Partner, but more than that — we’re people who genuinely like solving problems, testing new ideas, and turning complex stuff into simple solutions.
we believe in
We believe work should make sense – not just on paper, but in real life. That means innovation, partnership, responsibility, flexibility & adaptation, transparency, and a team you can count on. We support each other, share what we know, and celebrate wins (big and small). If you’re someone who likes figuring things out, isn’t afraid to take initiative, and wants to work with tech that actually makes a difference — you might just find your place with us.
Because at FOTC, it’s not just about cloud. It’s about people.
End-to-end security of the cloud and user environments (GCP/AWS + Google Workspace) – prevention, detection, response, compliance (SOC 2, ISO 27001, PCI DSS, NIS2), privacy, and business continuity.
Scope of Accountability Security Program- Security/GRC Strategy and Roadmap; policies, standards, controls; asset & data classification.
- Risk Register, TPM (Third-Party Management), BCP/DR (Business Continuity Plan/Disaster Recovery); privacy by design (in cooperation with DPO/Legal).
- Hardening GCP/AWS (IAM, networking, WAF, KMS/HSM, DLP, Secret Mgmt), CSPM/CNAPP; scanning IaC/containers in CI/CD.
- Observability & logging: log export to SIEM (e.g., Chronicle/Big Query) + detection and SOAR playbooks.
- Identity & Access: Configuring SSO (SAML/OIDC) with IdP, SCIM/automated role assignment, Context‑Aware Access (Beyond Corp), MFA/Passkeys policies, OAuth restrictions (app access control), 3rd‑party token block lists.
- Email & Domains: SPF, DKIM, DMARC (p=quarantine/reject), MTA‑STS + TLS‑RPT, BIMI; routing and quarantine rules; BEC/impersonation protection; S/MIME (optionally CSE).
- DLP & Data Protection: DLP policies for Gmail/Drive/Chat, Drive labels/classification, data regions, Client‑Side Encryption (CSE) where required (e.g., legal department).
- Monitoring & IR: Alert Center and Security Center (risk dashboard, recommendations), alert flow to SIEM/SOAR; IR playbooks for phishing/BEC/stolen sessions/OAuth abuse.
- Compliance & eDiscovery: Google Vault (retention, hold, eDiscovery), legal holds, audits (Admin SDK Reports API), preparation of evidence for SOC 2/ISO/PCI/NIS
2. - Endpoint & Browsers: Google Endpoint Management (Android/iOS/Windows/macOS), Chrome Enterprise policies (extensions allowlist/blocklist, safe browsing, download protection, password alerts), data isolation (managed profiles).
- Automation: Admin SDK (Directory/Reports), GAM/gamADV‑XTD, Apps Script; automated response (e.g., revoke tokens, reset sessions).
- Design and operation of a lightweight SOC (SIEM/SOAR/EDR), 24/7 on‑call procedures (lightweight), tabletop exercises, RCA (Root Cause Analysis).
- SAST/SCA/DAST, IaC scanning, SBOM, supply‑chain, signed artifacts, secret scanning, threat modeling.
- Awareness program (phishing drills), secure coding, policies for using Workspace and devices.
- Leading a small Sec Ops/App Sec/GRC team; budget; cooperation with Head of Cloud/CTO, Dev Ops, Data, Legal, DPO.
- 6–10+ years in cybersecurity;
min. 3 years in cloud security (GCP/AWS/AZURE) and min. 2 years of practical Google Workspace Security experience (Enterprise/Enterprise Plus). - Documented implementation/maintenance: DMARC/SPF/DKIM, MTA‑STS/TLS‑RPT, DLP (Gmail/Drive), Vault (retention/holds), Alert/Security Center, Context‑Aware Access, SSO…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).