Security Lead: SaaS & Cloud Security (Hybrid)

SimaPro; Helsinki; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Remote days supported

Hybrid work arrangement (Helsinki 2–3x

Direct access to CTO

Job summary

One Click LCA is seeking a Security Lead to own security across our software products, cloud infrastructure and internal IT environment. You will work with software engineering, platform and business teams to identify risks and implement effective controls.

This full-time, hybrid role is based in Helsinki and includes leadership of a security analyst, with focus on ISO 27001, SOC 2 and GDPR compliance, plus incident response readiness.

Qualifications

• Hands-on cloud and production infrastructure security experience.
• Strong understanding of application security and secure software architecture.
• Experience operating through influence in an org where security doesn’t own systems.
• Corporate and identity security depth in SSO, endpoint management and SaaS governance.
• Experience handling security incidents and improving incident response readiness.
• Credibility to present to executives after a system review.
• Familiarity with SOC 2, ISO 27001 and GDPR; CISSP/CISM/CISA welcome but not required.

Responsibilities

• Secure SaaS products, APIs and cloud infrastructure.
• Collaborate with engineering on security architecture, threat modelling and testing.
• Identify, validate and prioritise security risks and drive mitigations.

Skills

Cloud security

Application security

Incident response

Security governance

ISO 27001

SOC 2

GDPR compliance

Security leadership

Executive communication

Job description

One Click LCA is seeking a Security Lead to own security across our software products, cloud infrastructure and internal IT environment. You will work with software engineering, platform and business teams to identify risks and implement effective controls.

This full-time, hybrid role is based in Helsinki and includes leadership of a security analyst, with focus on ISO 27001, SOC 2 and GDPR compliance, plus incident response readiness.