Information Security Manager

at  Vincit

As we continue to expand our presence in more demanding customer segments, we need to scale up our capabilities in information security management. We must ensure our Information Security Management System (ISMS) continuously improves and aligns seamlessly with customer requirements and industry best practices, such as the ISO 27000 series of standards. To support this effort, we are seeking to hire an experienced Information Security Manager to ensure our customers can trust us with their business-critical projects and service delivery. Are you up for the challenge?

ESSENTIAL SKILLS:

Proven track record of working with large corporate customers with established practices and requirements for information security.
Multiple years of hands-on experience in Security Management, Information Security, Cybersecurity, or a related field.
Deep practical experience with the ISO/IEC 27001:2022 standard and implementing its practices in real-world contexts.
Possession of at least one relevant qualification, such as CISM, CIPT, CISSP, CCSP, CISA, ISO/IEC 27001 Lead Implementer/Auditor, or another widely recognized certification.
Proficiency in both English and Finnish is required to ensure effective communication, including with our Finnish-speaking customers.

DESIRABLE SKILLS:

Experience in the public sector and familiarity with common guidelines such as VAHTI, JHS, PiTuKri, KaTaKri, and TL III-IV.
Understanding of data protection regulations (e.g., GDPR) and quality management systems and standards such as NIS-2, ISO 9001, ISO 13485, or ISO/IEC 27701.
Experience in security-related thought leadership, such as delivering public presentations and/or hosting security-focused events for customers.
Community-building skills to engage our key security-minded professionals.

️ Information Security Management: Develop, implement, and manage the organization’s information security policies. Collaborate with executive leadership to align security initiatives with business objectives. Promote a security-first culture through training and awareness programs for employees.
️ Security Operations: Lead and oversee the security operations team to protect confidential information and mitigate security risks. Stay updated on emerging threats to ensure the organization is prepared to respond to security incidents.
️ Information Security Consulting: Provide consulting services to customers on information security best practices and strategies. Help ensure that customer deliveries comply with industry standards, regulatory requirements, and company policies.
️ Information Security Advisory: Act as a thought leader in the field of information security, representing the organization at customer meetings and industry events, such as security-related conferences.