Information Security Manager

at  Vincit Oyj

As we continue to expand our presence in more demanding customer segments, we need to scale up our capabilities in information security management. We must ensure our Information Security Management System (ISMS) continuously improves and aligns seamlessly with customer requirements and industry best practices, such as the ISO 27000 series of standards. To support this effort, we are seeking to hire an experienced Information Security Manager to ensure our customers can trust us with their business-critical projects and service delivery. Are you up for the challenge?
What is the job like really?
The core focus of this role is managing company-wide global security operations, including handling security incidents, coordinating our information security awareness program, developing and enforcing security policies, actively managing risks, and organizing internal security audits.
From time to time, you will participate in pre-sales activities, consult on customer projects, and reassure our current and future customers about Vincit’s information security management practices. We value a customer-focused individual with business experience and understanding of customer needs, who can also promote our thought leadership on relevant topics. Customer assignments may include participating in external audits, consulting on information security matters, and advising on compliance and regulatory concerns for our customers.
While the role grants you authority and independence, you won’t be working alone. You will have the opportunity to steer our internal focus group on security development and collaborate closely with our exceptional Platforms & Services core team, which is responsible for continuous service delivery, along with other key stakeholders in our support functions.

Key responsibilities:

• ️ Information Security Management: Develop, implement, and manage the organization’s information security policies. Collaborate with executive leadership to align security initiatives with business objectives. Promote a security-first culture through training and awareness programs for employees.
• ️ Security Operations: Lead and oversee the security operations team to protect confidential information and mitigate security risks. Stay updated on emerging threats to ensure the organization is prepared to respond to security incidents.
• ️ Information Security Consulting: Provide consulting services to customers on information security best practices and strategies. Help ensure that customer deliveries comply with industry standards, regulatory requirements, and company policies.
• ️ Information Security Advisory: Act as a thought leader in the field of information security, representing the organization at customer meetings and industry events, such as security-related conferences.

What are we looking for?

ESSENTIAL SKILLS:

Proven track record of working with large corporate customers with established practices and requirements for information security.
Multiple years of hands-on experience in Security Management, Information Security, Cybersecurity, or a related field.
Deep practical experience with the ISO/IEC 27001:2022 standard and implementing its practices in real-world contexts.
Possession of at least one relevant qualification, such as CISM, CIPT, CISSP, CCSP, CISA, ISO/IEC 27001 Lead Implementer/Auditor, or another widely recognized certification.
Proficiency in both English and Finnish is required to ensure effective communication, including with our Finnish-speaking customers.

DESIRABLE SKILLS:

Experience in the public sector and familiarity with common guidelines such as VAHTI, JHS, PiTuKri, KaTaKri, and TL III-IV.
Understanding of data protection regulations (e.g., GDPR) and quality management systems and standards such as NIS-2, ISO 9001, ISO 13485, or ISO/IEC 27701.
Experience in security-related thought leadership, such as delivering public presentations and/or hosting security-focused events for customers.
Community-building skills to engage our key security-minded professionals.
Cool but what’s in it for me?
Maximal flexibility and location independence - set up your workstation wherever you want and utilize our awesome offices’ premises in the way you feel is most suitable for you
Active Communities - Our belief, “extraordinary things are created together”, is best seen in our various communities. We believe in togetherness and support each other in finding their place and peeps in the organization, whether it’s office communities, hobby clubs, project teams, or more.
Work-life balance - we encourage you to shape your work life according to your personal needs
More than generous employee benefits - lunch benefit, free snacks and drinks, healthcare and dental care services, extensive insurance, childcare services, high-quality work equipment - the list goes on!
Competitive salary - the base salary for this position ranges from €5,500 to €7,000 per month, depending on experience and qualifications + you’ll enjoy Vincit’s bonus model, personnel fund and transparent salary weeks
Competence development - we have set up Univincity to support workplace learning in various ways
Various career opportunities - take whatever career steps feel appropriate, whether shifting upwards, sideways or downwards.
Modern, transparent, and humane organization culture - thanks to these traits we’re an award-winning workplace to be proud of
Local and international work environment - engage in various activities and hobby clubs in your local community or explore exchange opportunities in our European or US talent hubs
A team of skilled experts at least equal to yourself - our way of working and thinking usually suits those who are, or want to be, at the top of their profession. Work with us, and you get to be part of our Vincit community which consists of the country’s top developers, designers, and other experts.
Curious but still on the fence?
If there’s anything you’d like to chat about the job, don’t hesitate to get in touch with Kyösti Herrala (Head of Platforms & Services) at [email protected].
To get to know us as an employer, we recommend checking our career site, blog, Facebook, Instagram and LinkedIn.

• ️ Information Security Management: Develop, implement, and manage the organization’s information security policies. Collaborate with executive leadership to align security initiatives with business objectives. Promote a security-first culture through training and awareness programs for employees.
• ️ Security Operations: Lead and oversee the security operations team to protect confidential information and mitigate security risks. Stay updated on emerging threats to ensure the organization is prepared to respond to security incidents.
• ️ Information Security Consulting: Provide consulting services to customers on information security best practices and strategies. Help ensure that customer deliveries comply with industry standards, regulatory requirements, and company policies.
• ️ Information Security Advisory: Act as a thought leader in the field of information security, representing the organization at customer meetings and industry events, such as security-related conferences