Information Security Officer

Information security plays an increasingly important role in how we serve our customers, meet regulatory requirements and support sustainable business growth. As our business continues to evolve, we're looking for an Information Security Officer to help strengthen and further develop information security across Fellowmind Finland. This is an independent specialist role with broad ownership and visibility across the organisation. You'll combine information security expertise with strong stakeholder collaboration, turning security, regulatory and customer requirements into practical ways of working and helping to strengthen our security culture. The role is primarily based in Helsinki or Tampere, where many of your closest stakeholders and colleagues are located. While English is our corporate language and you'll collaborate extensively with colleagues across the international organisation, much of your day-to-day stakeholder collaboration, communication and awareness work takes place in Finnish. Therefore, professional working proficiency in both Finnish and English is essential for success in this role. Your Mission Your mission is to maintain and further develop Fellowmind Finland’s information security management system and ensure that information security becomes an effective, sustainable part of business operations. You will coordinate governance, risk management and improvement activities, support implementation of security controls, and maintain a clear view of risks and priorities. The role has a strong governance and coordination focus, supported by sufficient technical understanding to work effectively with IT and security specialists. As an independent specialist, you'll work across functions and teams throughout the organisation, helping bring together business, technology and compliance perspectives to move security initiatives forward. You are not expected to personally configure every security technology or own every operational control. Your impact comes from setting direction, bringing the right people together and ensuring that agreed actions move forward. You will work closely with local management, Internal IT, Legal, HR, delivery teams and sales. You will also collaborate with information security colleagues across the Fellowmind Group to share knowledge, align ways of working and coordinate common security topics. Your Areas of Focus Information Security Leadership & Development Lead the development of information security in Fellowmind Finland and act as the organisation's primary security contact. Maintain oversight of security objectives, risks, improvement initiatives and local implementation of group-wide security practices. ISMS, Risk Management & Compliance Maintain and continuously improve the Information Security Management System (ISMS) in alignment with ISO/IEC 27001. Coordinate risk assessments, control follow-up, audits, management reviews and corrective actions. Help ensure compliance with relevant requirements, including GDPR, NIS2 and emerging regulations such as the EU AI Act. Business & Customer Enablement Provide information security expertise to support business decisions and operational development. Support sales and customer-facing units with security questionnaires, tenders, contractual reviews and customer assurance discussions. Help integrate information security into delivery practices, customer projects and business decision-making. Security Awareness & Incident Coordination Promote and develop security awareness through communication, training and practical guidance. Guide and coordinate the implementation and improvement of technical security controls. Coordinate security assessments, testing and remediation follow-up. Maintain oversight of information security incident management and support coordination, escalation, investigation, communication and lessons learned. Security Architecture & Third-party relationships Manage third-party security assessments and coordinate the identification and follow-up of supplier security risks. Participate in procurement and supplier onboarding to ensure that relevant security requirements are assessed and addressed. Support secure design and architecture decisions when new internal infrastructure, applications or technology services are introduced or significantly changed. What we expect from you Several years of experience in information security, security governance, risk management or compliance. Practical knowledge of ISO/IEC 27001 and experience in maintaining or developing an ISMS. Understanding of relevant regulatory topics such as GDPR, NIS2 and the evolving EU AI regulatory landscape. Good technical understanding of IT infrastructure, cloud environments and key information security principles and controls. Ability to work independently, prioritise a broad range of topics and drive progress by engaging stakeholders across the organisation. Professional working proficiency in both Finnish and En