Tietoturva-asiantuntija - Caverion - Helsinki, Suomi

Assemblin Caverion Group is a leading northern European provider of technical services and installations, delivering smart and sustainable solutions across the full lifecycle of the built environment. With around 20,000 professionals in nine countries, we help customers improve energy efficiency, sustainability, automation and digital resilience. Join us in strengthening cybersecurity across a modern European IT environment. We are looking for an Information Security Specialist to support both security governance and hands-on security operations. This role combines ISO 27001-based ISMS development, risk and compliance activities, and operational security work within a Microsoft-centric security environment. LocationVantaa or Stockholm (office-first hybrid model) Why Join UsWork in a modern Microsoft cloud security environment (Entra ID, Defender, Sentinel)Influence security governance and operational security improvements across an international groupDevelop your expertise through certifications, training and challenging security initiativesCollaborate with Group IT, IAM specialists, business stakeholders and senior leadershipContribute directly to reducing cyber risk and improving organizational resilience Key ResponsibilitiesSecurity Governance, Risk & ComplianceSupport the operation, maintenance and continuous improvement of the ISO 27001-based ISMSImplement and maintain security controls, policies, standards and proceduresConduct and support risk assessments, audits and compliance activitiesMaintain security documentation and governance artefactsDrive security awareness and security culture initiatives across the organizationSecurity Operations & TechnologyWork with Microsoft security technologies including Entra ID, Defender and SentinelParticipate in threat monitoring, detection, investigation and incident response activitiesCoordinate incident follow-up, remediation and lessons-learned activitiesCollaborate with IT teams to strengthen the overall security postureContribute to security initiatives involving MFA, Privileged Access Management (PAM) and Zero Trust principlesSupport continuous enhancement of security detection and response capabilities Required QualificationsExperience in information security, security operations and/or GRCGood understanding of information security principles, controls and risk managementExperience with Microsoft security solutions or similar enterprise platformsExperience with risk assessments, documentation and security processesUnderstanding of incident detection, response and remediation processesStructured and organized way of working Preferred QualificationsExperience working with ISO 27001-based ISMS environmentsFamiliarity with CIS Controls and other recognized security frameworksUnderstanding of audit and compliance processesExperience with SIEM/SOAR platforms such as Microsoft SentinelExposure to AI security, AI governance or emerging technology risk topicsCertifications such as CISSP, CISM, SC-200 or ISO 27001 Lead Implementer Personal AttributesAnalytical and risk-aware mindsetStrong collaboration and communication skillsAbility to work independently, take initiative and drive improvementsCuriosity and willingness to stay current with the evolving threat landscape Position ContextPart of the Information Security function, reporting to the CISO. Works closely with Group IT, the IAM Service Owner and business stakeholders. The role balances security governance responsibilities with operational security activities and contributes to maintaining a secure and compliant IT environment. Compensation & BenefitsCompetitive salary aligned with Nordic market levels, together with benefits, flexibility and professional development opportunities. ApplicationPlease submit your application by Friday, August 14, 2026. We review applications continuously and encourage candidates to apply as soon as possible as the recruitment will be concluded as soon as suitable candidate is found.For more information about the role, please contact Jari Törmälä, Chief Information Security Officer +358405285133 during the following times:22.7. and 29.7. at 13.00-14.00 Hae tätä työpaikkaa share