Outokumpu

Security Lead – IT Platform

Outokumpu

full-time

Posted on:

Location Type: Office

Location: Helsinki • Finland

Visit company website

Explore more

✨ AI Apply
Apply

Job Level

Senior

Tech Stack

AzureCyber SecurityLinux

About the role

  • Own Endpoint Protection (Microsoft Defender, Symantec, TXone): strategy, roadmap, policies, SLAs/SLOs, operations, tuning, coverage
  • Own Privileged Access Management (PAM) for IT and OT, incl. Entra ID PIM
  • Define security guardrails and secure baselines; review and approve exceptions
  • Act as technical incident commander; lead post-incident reviews and structural fixes
  • Manage vendors, licenses, budgets; optimize cost and tool rationalization
  • Ensure audit/compliance readiness (ISO 27001/27002, NIS2, GDPR)
  • Partner with SOC/CSIRT on detections, tuning, hunting, playbooks, incident response
  • Align with CISO/Cyber on strategy, risk appetite, policies, exceptions, audits
  • Embed guardrails in platform designs; drive remediation, patching, segmentation

Requirements

  • Bachelor’s in Computer Science/Information Security or equivalent experience
  • 5+ years in cyber security; 3+ years operating platform security at scale
  • Technical: Endpoint protection (Defender, Symantec, TXone), PAM (IT/OT), Entra ID PIM, Azure/M365 hardening and log ingestion, Windows/Linux security
  • Competencies: ITIL service management, vendor management, risk assessment, stakeholder communication, change leadership, coaching mindset
Benefits
  • Impact at global scale in complex IT/OT environments
  • Ownership and autonomy over core security services
  • Modern tools across cloud, endpoint, and identity
  • Training, certifications, and growth opportunities
  • Collaborative, international culture
  • Competitive compensation and benefits
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
Endpoint ProtectionPrivileged Access ManagementAzureM365Windows SecurityLinux SecurityRisk AssessmentAudit ComplianceISO 27001ISO 27002
Soft Skills
Stakeholder CommunicationChange LeadershipCoaching MindsetTechnical Incident CommandPost-Incident Review Leadership