Cyber Security Lead

Security is already a priority at TCG, and we are investing to take it further. We are looking for a Cyber Security Lead to strengthen and lead our information security across the group: our shops, our production sites, and the platforms that connect them.

You lead cyber security across the group, building on the processes and controls already in place and raising the bar further. The scope covers our own online shops, internal platforms, cloud and on-premise infrastructure, and the production sites across several countries. You work closely with IT, development, legal and management as the central point for all things security.

In short: Senior ownership of cyber security for a multi-country group, with a direct line to leadership and a clear mandate to strengthen it further.

• Drive the security roadmap. Review our current setup, sharpen priorities, and keep the plan moving with the business.
• Strengthen detection and response. Further develop our incident response process, from monitoring and triage through to containment, recovery and lessons learned.
• Harden our platforms. Work with development and infrastructure teams on secure architecture, access management, vulnerability management and penetration testing.
• Manage third-party risk. Review vendors, partners and integrations, and make sure the people we work with meet our standards.
• Keep us compliant. Translate GDPR, NIS2 and customer requirements into practical controls, and support audits and customer security questionnaires.
• Build awareness. Make security part of how 750+ people work, through training, clear policies and being approachable.
• Use automation and AI. We are an AI-first company that builds its own internal tools, so there is room to automate monitoring, reporting and routine checks.

• 5+ years in cyber security, with hands-on experience in incident response, security operations or security consulting.
• Broad technical grounding across cloud and on-premise environments, networks, identity and web application security.
• Incident experience. You have been in the room when something went wrong and know how to lead calmly through it.
• Regulatory fluency. Comfortable with GDPR and NIS2; familiarity with ISO 27001 or similar frameworks.
• Pragmatic judgement. You can tell the difference between a real risk and a theoretical one, and explain both to non-technical leaders.
• Continuous improvement mindset. You take what works, find what can be better, and make it happen.
• English at a professional level; German is a plus.

Nice to have

• Nice to have: a certification such as CISSP, CISM, OSCP or ISO 27001 Lead Implementer/Auditor · experience in e-commerce or manufacturing environments · a forensics background

• Real ownership — you lead and further develop security for a global group, with direct access to leadership
• International exposure — teams across Germany, Poland, Latvia, the USA, the UAE and Vietnam
• Latest tooling — including the internal AI tools we build in-house
• Local benefits — health coverage, paid leave & local perks