Security Compliance Manager: Risk, Audits & Governance

Basware; Tampere; On-site; EUR 90,000 - 130,000; Full time

Job summary

Basware is seeking a Manager - Information Security (Compliance) to lead governance, risk management, and stakeholder engagement across security compliance activities. You will coordinate audits, advise internal teams, and drive risk-based improvements.

You will collaborate with customers, auditors, suppliers, and business units to ensure robust compliance, policy alignment, and continuous improvement, including awareness programs.

Qualifications

• Minimum two years in information security or security compliance.
• Knowledge of ISO/IEC 27002, PCI DSS, the NIST Cybersecurity Framework and ISAE standards.
• Ability to support audits and risk management discussions.

Responsibilities

• Manage the Security Advisory process and respond to information security queries.
• Conduct third-party information security risk assessments and supplier reviews.
• Maintain the information security risk register and coordinate risk reviews and actions.
• Plan, coordinate and perform internal information security audits.
• Support external audits and assurance activities with evidence and responses.
• Develop security training and awareness programs.
• Engage stakeholders and drive continual governance improvements.

Job description

Basware is seeking a Manager - Information Security (Compliance) to lead governance, risk management, and stakeholder engagement across security compliance activities. You will coordinate audits, advise internal teams, and drive risk-based improvements.

You will collaborate with customers, auditors, suppliers, and business units to ensure robust compliance, policy alignment, and continuous improvement, including awareness programs.