Azure Platform Security Specialist, Cloud Platform Services (Helsinki/Oulu)

OP Pohjola; Helsinki; Hybrid; EUR 90,000 - 125,000; Full time

Benefits offered by this job

Hybrid work model

Comprehensive occupational healthcare

Sport & cultural benefits

Product discounts

Job summary

OP Pohjola seeks an Azure Platform Security Specialist to shape and secure a large-scale Azure ecosystem. You will define governance, identity, and security controls across enterprise platforms, collaborating with Cyber Security, IT GRC, and platform teams.

You will implement policy, IAM, and risk mitigations using IaC, CI/CD pipelines, and secure change practices in a hybrid Helsinki/Oulu setting.

Qualifications

• Hands-on experience with Azure Policy, including policy design, compliance monitoring, remediation, exemptions, and policy-as-code practices

Responsibilities

• Translate security, regulatory, and Cloud Control Framework requirements into practical Azure Policy and IAM solutions
• Perform risk and impact assessments for policy and access management changes
• Manage policy exemptions with Cyber Security, IT GRC, and control owners
• Contribute to audits, control assessments, and continuous improvement of Azure security governance
• Maintain and automate Azure Policy and IAM controls through Terraform, GitHub, and Azure DevOps pipelines
• Review and assess custom Azure role requests, balancing business needs with security and risk considerations
• Support platform and application teams with policy compliance guidance and security best practices
• Produce technical documentation, architecture decisions, and implementation guidelines for platform governance capabilities
• Manage end-to-end lifecycle of Policy and IAM changes through formal change management processes

Skills

Azure governance

IAM

Policy interpretation

Cloud security principles

Risk assessment

DevSecOps

IaC (Terraform/Bicep)

CI/CD automation

Compliance governance

Tools

Terraform

Bicep

GitHub Actions

Azure DevOps

Job description

Do you want to be at the forefront of shaping and securing a large-scale Azure platform? As an Azure Platform Security Specialist, you will play a key role in defining how cloud governance, identity, and security controls are implemented across the enterprise. In this role, you will combine deep technical expertise with security, compliance, and risk management to help build a secure and scalable cloud environment for the future.

This position is located in Helsinki or Oulu, based on your preference. At OP Pohjola, we work in a hybrid model that combines office and remote work.

What is the role about?

As an Azure Platform Security Specialist, you will play a key role in securing and governing our enterprise Azure platform. You will be responsible for Azure Policy and identity and access management practices, ensuring that security, compliance, and governance requirements are translated into practical and scalable platform controls.

In this hands-on specialist role, you will work closely with Cyber Security, IT GRC, platform teams, operations, and application teams to continuously improve Azure governance and access management. Success in the role requires both solid technical expertise and the ability to balance security, risk, compliance, and operational needs in day-to-day decision-making.

Key skills and expertise

• Azure Policy Management & Compliance interpretations.
• Azure Identity & Access Management (IAM)
• Microsoft Defender for Cloud, MCSB and CSPM
• Azure Landing Zone architecture
• Cloud security governance and regulatory compliance
• Azure CAF (Cloud Adoption Framework) and Enterprise-Scale Architecture
• Infrastructure & Policy as Code (IaC) using Bicep and Terraform
• CI/CD Automation with GitHub Actions and Azure Pipelines
• AI-Assisted Governance, Compliance and Security Analysis
• Change Management and Platform Governance

Key responsibilities

• Translate security, regulatory, and Cloud Control Framework requirements into practical Azure Policy and IAM solutions
• Perform risk and impact assessments for policy and access management changes
• Manage policy exemptions together with Cyber Security, IT GRC, and control owners
• Contribute to audits, control assessments, and continuous improvement of Azure security governance
• Maintain and automate Azure Policy and IAM controls through Terraform, GitHub, and Azure DevOps pipelines
• Review and assess custom Azure role requests, balancing business needs with security and risk considerations
• Support platform and application teams with guidance on policy compliance, access management, and security best practices
• Produce technical documentation, architecture decisions, operational procedures and implementation guidelines for platform governance capabilities.
• Manage the end-to-end lifecycle of Policy and IAM changes, including impact assessment, testing, risk analysis, documentation, change approvals and production deployment through the formal change management process

What are we looking for?

To succeed in this role, you bring strong expertise in Azure governance, identity and access management, and cloud security, combined with the ability to balance security, compliance, risk, and operational requirements in a large-scale enterprise environment.

• Hands-on experience with Azure Policy, including policy design, compliance monitoring, remediation, exemptions, and policy-as-code practices
• Strong knowledge of Microsoft Entra ID, Azure RBAC, Privileged Identity Management (PIM), managed identities, privileged access, and identity governance
• Solid understanding of cloud security principles such as least privilege, Zero Trust, defence in depth, and secure change management
• Experience interpreting security, compliance, regulatory, and governance requirements and translating them into practical technical controls
• Experience in risk assessments, impact analysis, control-gap evaluations, and evidence-based decision making
• Familiarity with Infrastructure as Code and DevSecOps practices using Terraform, Git, GitHub, and/or Azure DevOps
• Ability to collaborate effectively with Cyber Security, IT GRC, platform teams, and application teams across the organisation

We are looking for someone with strong analytical and communication skills, a practical security mindset, and the confidence to challenge solutions that may introduce unnecessary risk. You are comfortable working with a wide range of stakeholders and communicating complex topics in a clear and practical way. Excellent English skills are required, while Finnish language skills are considered an advantage. Experience in a regulated enterprise environment, preferably within financial services, as well as relevant Microsoft Azure certifications and familiarity with common security and compliance frameworks, will further support your success in the role.

Why OP Pohjola?

In internal surveys at OP Pohjola, our employees often cite the work community and their highly skilled colleagues as the most rewarding aspects of their work. We take great pride in this. As a member of OP Pohjola, you will join a company that is dedicated to developing the best products and services in the industry.

As an employer OP Pohjola offers you a stable environment where people come first. Our people value good work-life balance and opportunities to learn and grow in their role. Our70-20-10 model gives you a chance to focus on your professional development on your work time – by utilizing our very own OP Tech Academy, for instance.

When you work for OP Pohjola, you work with the best products and services in the field. In everyday life, it is, of course, very nice to work in an architecturally beautiful environment, in a location easily accessible from basically anywhere. As an OP Pohjola employee, you are entitled to

• Structured model for professional career advancement
• Possibility to enhance your own skillset while working with highly talented teams
• Comprehensive occupational healthcare
• Sport and cultural benefits
• Benefits and discounts on OP Pohjola's own products

We operate in the financial sector and our business is founded on trust and accountability. For this reason, we will check the successful candidate's credit history, corporate connections and potential conflicts of interest. In addition, the successful candidate must take a drug test and will be subject to a security clearance vetting by the Finnish Security and Intelligence Service.

OP Pohjola – We have something in common

OP Pohjola is a workplace that values diversity, equity, and inclusion. We want everyone to feel welcome, respected, and appreciated. We believe that different backgrounds, perspectives, and experiences make us stronger. Growth comes from embracing these differences and learning from one another. We encourage everyone to apply for opportunities with us. We're delighted that you're interested in joining us on our journey.

We are owned by our customers and are the most attractive employer in the financial sector in Finland. OP Pohjola employs over 15 000 professionals in the field. Working with us is meaningful not only to our employees but also to others, as Finland’s largest financial institution, we help build a more hopeful future through our work. We’ve been doing this for over 120 years.