Head of IT & Information Security - Nawia Oy - Helsinki, Finland

Are you ready to safeguard our most valuable trust asset? We are looking for an experienced Head of Information Security to lead our IT & security governance, manage our ISMS framework, and ensure the resilience of our IT landscape. At Evitec, we operate in a highly regulated environment with demanding customer expectations and continuous external scrutiny. Our ISO/IEC 27001–certified Information Security Management System (ISMS) is a core trust asset and must be continuously improved, audit-ready, and embedded in everyday work. As the Head of Information Security, you will be the primary owner of the company’s security governance. You will play a pivotal role in ensuring that our policies, processes, risk management, incident readiness, and third-party security are not only consistently implemented across the organization but also transparently demonstrable to our stakeholders and auditors alike. Your responsibilities will include owning and evolving the ISMS, running security risk management, owning incident management, governing vulnerability management, maintaining Business Continuity principles, leading customer and supplier security management, driving security awareness, supporting strategic initiatives and reporting, and supporting IT implementation. You will partner closely with IT, Legal, and Engineering teams to embed security into products and responses. To succeed, you should have proven ownership of an ISMS and ISO/IEC 27001 audits, strong policy and process operationalization skills, ability to interpret regulation, experience in customer-facing security assurance, excellent communication skills in Finnish and English, and familiarity with cloud environments and AI governance. We offer a collaborative, flexible, and modern working environment with comprehensive benefits. The role reports directly to the CFO and is based at our headquarters in Espoo with a hybrid work model.