Security Compliance Manager - Audit, Risk & Governance

Basware; Espoo; On-site; EUR 90,000 - 120,000; Full time

Job summary

Basware is seeking a Manager - Information Security (Compliance) to lead governance, risk, and assurance activities across the organization. You will guide customers, auditors and internal teams with practical, risk‑based information security guidance and drive continual improvement of the security compliance program.

The role partners with business and solution owners to ensure audit readiness, maintain the risk register, and support remediation actions.

Qualifications

• Minimum of two years’ experience in information security or security compliance.
• Strong knowledge of recognised information security control frameworks and assurance standards (ISO/IEC 27002, PCI DSS, NIST CSF, ISAE).
• Practical experience of information security risk management including identification, assessment, treatment and reporting.
• Experience supporting internal or external audits, evidence collection, control testing and remediation tracking.

Responsibilities

• Customer and stakeholder assurance: manage security advisory requests from customers, prospects and partners; provide practical information security guidance to colleagues and stakeholders.
• Risk, supplier assurance and business continuity: conduct third‑party risk assessments, maintain the risk register, and support BIA reviews.
• Audit and corrective action management: plan and coordinate internal audits, gather evidence, and track corrective actions with owners.
• Compliance initiatives and awareness: develop security training and drive compliance improvements with clear plans and stakeholder communication.

Skills

Security governance

Risk management

Audit support

Stakeholder engagement

Information security controls

Job description

Basware is seeking a Manager - Information Security (Compliance) to lead governance, risk, and assurance activities across the organization. You will guide customers, auditors and internal teams with practical, risk‑based information security guidance and drive continual improvement of the security compliance program.

The role partners with business and solution owners to ensure audit readiness, maintain the risk register, and support remediation actions.