Head of Security for a Sustainability SaaS

Role overview Lead security across SaaS products and internal IT as a hands-on practitioner and team manager. You will establish the security function, guide product and corporate security, and work with engineering, platform, IT, and leadership teams to reduce risk across a global environment.

Responsibilities - Set security strategy, standards, and policies for both products and company operations. - Lead application security through threat modeling, secure design, code review practices, and penetration-test planning and triage. - Own incident response planning and execution, including tabletop exercises. - Coordinate renewals for security standards and support customer reviews, questionnaires, and audits. - Partner with platform, IT, and support teams to secure cloud infrastructure, internal systems, and processes. - Support privacy and data-protection obligations, and manage a security analyst.

Requirements - Experience securing cloud and production infrastructure in partnership with DevOps or platform teams. - Ability to drive security through influence in an organization where other teams own the systems. - Strong knowledge of identity and corporate security, including SSO, endpoint management, email, SaaS governance, and integrations. - Experience leading incident response under pressure. - Ability to communicate credibly with technical teams and executives. - Familiarity with SOC 2, ISO 27001, and GDPR. CISSP, CISM, or CISA certifications are welcome, but do not replace practical experience.

Benefits and work setup - Full-time, permanent role based in Helsinki, with remote days supported and an expectation of office collaboration two to three days per week. - Opportunity to shape security processes, tooling, and costs, working across both product and internal security. - Direct access to senior leadership and a collaborative international team. - Work connected to efforts to support a lower-carbon future. - Preference for candidates who are EU citizens or otherwise eligible to obtain the required security clearances.