Service Owner, Information Security

Whatever is built in this world should be something we can trust, now and always. For us, each dream of a new home, every customer’s success and every solution the size of a city begins with people. A job well done is all about smart, shared choices that are brought to life with our finest work and expertise. This is how we do more than just build well. We build lasting value and joy of achievement. Tomorrow well built is made together. As a Service Owner, Information Security at YIT, you will play a key role in ensuring that our IT security services support business needs, compliance requirements, and secure operations across the enterprise. Working closely with IT teams, business stakeholders, and external security partners, you will own and develop key security services, including identity and access management, cyber security operations, and vulnerability management. You will report to the Director, Common IT Services, and work in close partnership with our Chief Information Security Officer (CISO). While the CISO defines security strategy and policies, you will be responsible for the services that bring them into practice, ensuring they are secure, reliable, and aligned with business needs. This is a succession role: you will start in early 2027 and work alongside our experienced current service owner during the first half of the year before taking full ownership. The role is based in Finland. In this role you will be working with projects that require security clearance and background checks. What you'll do Own YIT's IT security services end to end, including the service roadmap, the service catalogue, the budget and service performance. Lead and steer our security partners (managed SOC/SIEM, network security operations and a global delivery team), including contracts, SLAs and continuous improvement. Manage security in customer projects with national security requirements, making sure our solutions meet the requirements set by customers and authorities. Lead the incident response process, including coordinating with relevant stakeholders during security incidents, including privacy related incident management Monitor and improve YIT's overall security posture, and report security metrics and KPIs to senior management in language the business understands. Make security part of how IT and business projects are delivered, from architecture to hand-over, and lead our practical compliance work based on relevant regulation such as GDPR. Manage YIT's public DNS, domains and certificates together with the business. Develop our security stack and the processes, documentation and standards around it. Our current security service delivery is built on Microsoft-based security stack (Entra ID, Defender, Purview and Sentinel). What helps you to succeed in this role At least five years in IT security, including experience of owning a security service or leading security delivery. Proven experience of managing external service providers and service budgets: contracts, SLAs, performance and costs. Hands-on understanding of cloud-native security technologies, including identity management, endpoint security, data protection, threat detection, and SIEM/SOC operations. Participate in projects that have special high security clearance requirements Solid experience in risk management and security incident response in a live production environment. Working knowledge of the regulation that applies to us. The ability to explain security clearly to people who are not security specialists, and fluent Finnish and English. A degree in computer science, information technology or a related field, or equivalent experience gained in practice. Experience with Finnish national security requirements (for example Katakri) and with handling classified information. Certifications such as CISSP, CISM or ITIL 4, and familiarity with frameworks such as ISO 27001 or NIST CSF. Experience of supplier, third-party and supply chain security in an environment with many subcontractors. Experience of working in a multi-country organization and with distributed teams. Security experience with operational technology, industrial systems or construction-site technology. You do not need to tick every box. If you recognize yourself in most of what we expect, we would like to hear from you. How you make an impact at YIT You understand customer needs and connect your daily work, decisions and solutions to creating customer value. You take ownership of your area of responsibility, deliver high-quality results and ensure execution of your own and colleagues’ work. You proactively improve your area of responsibility and ways of working. You learn from experience, share your expertise openly, and apply what you learn to improve both your own and the team’s performance. You work openly with others and help to create an environment where people feel valued. You build trust, collaboration and psychological safety so that people around you can succeed together. Wha