Senior ICT Specialist, Security

Qt Group Oyj; Suomi; Hybrid; CAD 145,000 - 209,000; Full time

Benefits offered by this job

Hybrid work options

Wellbeing resources

Career growth opportunities

Job summary

Qt Group Oyj is seeking a Senior Security Specialist to manage core security controls, drive the ISO/IEC 27001 ISMS, and respond to incidents. You will coordinate with IT Operations, R&D, Legal and external auditors to maintain compliance and security posture.

The role requires hands-on expertise in security operations, vulnerability management and cloud security, with an emphasis on risk-based decision making and cross-team collaboration. Hybrid work in a Nordic tech environment is offered.

Qualifications

• 5–8 years of hands-on information or cyber security experience in a corporate or multi-site tech environment.
• Experience with ISO/IEC 27001, NIST CSF, CIS Controls and GDPR is preferred.

Responsibilities

• Own and operate core security controls: endpoint protection, identity management, SIEM.
• Lead vulnerability management and act as a security incident responder.
• Maintain and evolve ISO/IEC 27001 ISMS, including policies and risk assessments.
• Own security of cloud environments (AWS, Microsoft 365) and liaise with IT vendors.

Skills

Security operations

ISO 27001 / ISMS

Cloud security

Vulnerability management

Incident response

Vendor security

Education

Degree in information security or related field

Tools

Entra ID

Defender

Purview

Intune

AWS security tooling

Job description

## **About Us**Ever wondered what powers the products people rely on every day? Chances are, we've helped build it.Our software and development tools help build products used in cars, hospitals, factories, homes, and industries around the world. We help engineers solve complex challenges and create technology people can depend on. Rooted in Nordic values and trusted by innovators worldwide, we combine deep technical expertise with a culture of curiosity, craftsmanship, and collaboration. With decades of engineering experience and a shared passion for technical excellence, we're helping shape the future of software and embedded development. We take pride in building tools for people who build the world around us.## **About the Role**Our IT / Information Security team keeps Qt Group secure as the company scales across its product lines — Qt Framework, Qt Design Studio, Squish, Coco and Axivion — and integrates IAR Systems into the group. We own the corporate security landscape end to end, from endpoint and identity through to the ISMS and the regulatory obligations our customers depend on. As Senior Security Specialist you will operate our core security controls, drive our ISO/IEC 27001 ISMS forward, and turn regulatory change into concrete action. This is a hands-on senior role reporting into IT leadership, working closely with IT Operations, R&D, Legal, People & Culture, and our external partners and auditors. **Possible location for this position is Espoo or Oulu Finland (hybrid).** ## **What You’ll Do*** Own and operate core security controls: endpoint protection, identity and access management, SIEM and related tooling* Lead vulnerability management and act as a key responder in our security incident response process, including post-incident reviews* Maintain and evolve our ISO/IEC 27001 ISMS — policies, risk assessments, Statement of Applicability — and support internal and external audits* Own security of our cloud environments (AWS, Microsoft, Google) and act as security liaison for key IT vendors* Track regulatory change (CRA, NIS2, CMMC Level 2, GDPR, ISO/IEC 42001) and translate it into action, partnering with Legal and the DPO* Support colleagues across Qt Group on security questions and customer security questionnaires, and run security awareness activities## **What You Bring to the Table*** 5–8 years of hands-on experience in information or cyber security, ideally in corporate IT or a multi-site technology company, with a degree in a relevant field or equivalent practical experience* A proven track record in at least two of: security operations, ISMS/ISO 27001, cloud security, vulnerability and incident management, vendor security* Hands-on experience with identity platforms (Entra ID), endpoint security, firewalls and VPN/SASE, plus AWS and Microsoft 365 security tooling (Defender, Purview, Intune)* Working knowledge of ISO/IEC 27001, NIST CSF, CIS Controls and GDPR* A builder's mindset — you own problems end to end, weigh risk against business impact, and stay calm under incident conditions* Strong collaboration skills and clear written and spoken English; you can work with R&D, Legal, Sales and customers alike## **Bonus Points For...*** Familiarity with CRA, NIS2, CMMC Level 2 or ISO/IEC 42001* Certifications such as CISSP, CISM, CISA, OSCP or the Microsoft SC-series* Finnish language skills## **Build What Matters. Grow Where It Matters.**We believe work should support your life, not the other way around. That's why our benefits are designed to be flexible, inclusive, and meaningful across every stage of your journey. From wellbeing and growth to celebrating life's big (and small) moments, we invest in what matters to you, wherever you are. * **Flexibility You Can Count On** We offer hybrid working options and flexible hours, empowering you to balance your personal life and professional goals because life outside of work matters, too.* **Meaningful Wellbeing Support** From mental health resources to physical wellness programs, we provide practical, accessible support tailored to local needs.* **Opportunities to Grow** Whether through hands-on learning, mentorship, or international collaboration, we invest in your development so your career can grow in the direction you choose.* **Inclusive by Design** You'll join a team that values different perspectives, encourages collaboration, and creates space for everyone to contribute and succeed.* **Rewarding Your Impact** Our compensation and benefits packages are competitive, regularly reviewed, and locally relevant, ensuring your contribution is recognized wherever you are.## **Bring Your Whole Self**The best ideas come from people with different experiences, perspectives, and ways of thinking. We are committed to creating an environment where everyone feels respected, supported, and able to do their best work. We welcome applicants of all backgrounds and identities and provide equal opportunities for all. Our technology may be what we're known for, but it's our people who make the difference. **We'd love to learn more about you. Tell us about your skills and experience, but just as importantly, tell us what motivates you and what kind of impact you want to make.**