Head of Security, Sustainability SaaS (Hybrid/Remote)

One Click LCA Ltd.; Uusimaa; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Remote work days

Hybrid Helsinki office 2–3 days/week

Direct CTO access

Job summary

One Click LCA Ltd. is seeking an experienced Head of Security to lead security across our SaaS products and internal IT.

This hands-on practitioner-leader role will be based in Helsinki with hybrid work options and a focus on secure design, incident response, and regulator compliance. You will guide strategy, policies, and audits while collaborating with CTO, platform, and IT teams to ensure robust security across a fast-growing, global environment.

Qualifications

• Experience leading security across product and internal IT environments.
• Ability to influence security initiatives without owning all systems.
• Credible communication with executives and technical teams.
• Familiarity with ISO 27001, SOC 2 and GDPR requirements.

Responsibilities

• Own security as a discipline across product and company perspectives, setting or updating strategy, standards and policy where needed.
• Own application security hands-on: threat modelling, secure design principles and code review practices, penetration test scoping and triage.
• Own incident response end-to-end: the plan, the tabletop exercises, and being ready for the day we need it.
• Manage ISO 27001, SOC 2 and other standard renewal efforts, and support customer security reviews, questionnaires and audits.
• Work with our platform, internal IT and support teams to secure our internal systems and processes.
• Support our GDPR and data protection obligations.
• Act as a manager to our security analyst who supports you in your area.

Skills

Security leadership

Threat modelling

Incident response

SOC 2 knowledge

ISO 27001 knowledge

GDPR compliance

Security governance

Education

Security certifications welcomed

Job description

One Click LCA Ltd. is seeking an experienced Head of Security to lead security across our SaaS products and internal IT.

This hands-on practitioner-leader role will be based in Helsinki with hybrid work options and a focus on secure design, incident response, and regulator compliance. You will guide strategy, policies, and audits while collaborating with CTO, platform, and IT teams to ensure robust security across a fast-growing, global environment.