Head of Operational Risk, Information Security
Pliant Plastics Corporation
full-time
Posted on:
Location Type: Hybrid
Location: Helsinki • 🇫🇮 Finland
Visit company websiteJob Level
Lead
About the role
- Lead the development and continuous improvement of Pliant’s Operational Risk and Information Security Frameworks, ensuring compliance with EBA, DORA, and PSD2 requirements.
- Maintain governance, control, and reporting structures aligned with Pliant Oy’s EMI obligations and group-wide needs.
- Manage and mentor a team of risk and IT security specialists, fostering collaboration and accountability.
- Advise senior management, the Risk Committee, and the Board on operational resilience and ICT/security risk.
- Own the enterprise-wide incident management framework covering ICT and non-ICT incidents.
- Lead post-incident reviews and root cause analyses, ensuring lessons learned are implemented.
- Maintain and enhance Pliant’s Information Security Management System (ISMS) in accordance with ISO 27001, SOC 2, and PCI DSS.
- Coordinate Business Continuity Management (BCM) across the group.
- Oversee the outsourcing and third-party risk management framework in line with EBA Guidelines on Outsourcing Arrangements.
- Serve as the primary point of contact for operational risk and information security matters with FIN-FSA.
Requirements
- Bachelor’s or Master’s degree in Information Security, Risk Management, Computer Science, or a related discipline.
- 5+ years of experience in operational risk, ICT risk, or information security management, ideally within financial services, fintech, or EMI.
- Demonstrated experience implementing or managing ISO 27001, SOC 2, and PCI DSS frameworks.
- Strong knowledge of EBA, DORA, and PSD2 operational and ICT risk requirements.
- Proven ability to lead a small team and engage effectively across Technology, Operations, and Compliance functions.
- Excellent communication, stakeholder management, and presentation skills at all levels.
Benefits
- Attractive remuneration
- Flexibility and possibility to work remotely
- Company card with a monthly allowance for lunches, coffee, etc. with co-workers
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
operational risk managementinformation security managementISO 27001SOC 2PCI DSSincident managementbusiness continuity managementroot cause analysisgovernance frameworksrisk assessment
Soft skills
leadershipmentoringcollaborationaccountabilitycommunicationstakeholder managementpresentation skillsadvisory skillsteam engagementcross-functional collaboration