Security Leader - Zero-Carbon SaaS (Hybrid/Remote)

One Click LCA Ltd.; Helsinki; Hybrid; EUR 120,000 - 170,000; Full time

Benefits offered by this job

Remote days supported

Office in Helsinki (hybrid)

Hybrid work model

Job summary

One Click LCA Ltd. is seeking an experienced Head of Security to lead security across our SaaS products and internal IT. This hands-on practitioner-leader role reports to the CTO and emphasizes security strategy and execution in a global, fast-growing environment.

Based in Helsinki, the role is hybrid, with flexibility for remote days. The candidate will manage security programs, incident response, compliance (ISO 27001, SOC 2, GDPR) and a security analyst. EU eligibility preferred.

Qualifications

• Experience securing cloud and production infrastructure in collaboration with DevOps teams.
• Influence-based security leadership in an organisation where security does not own all systems.
• Deep knowledge of SSO, endpoint management, email, SaaS governance, and risk focus.

Responsibilities

• Own security across product and company, setting strategy, standards and policy.
• Hands-on application security: threat modelling, secure design, code review, penetration testing scoping.
• Lead incident response planning, tabletop exercises, and real incidents.
• Manage ISO 27001, SOC 2 and renewal activities; support customer security reviews.

Skills

Cloud security

Incident response

Threat modelling

Code review

Security governance

Executive communication

Education

CISSP or CISM or CISA (welcome)

Tools

SOC 2

ISO 27001

GDPR compliance

Job description

One Click LCA Ltd. is seeking an experienced Head of Security to lead security across our SaaS products and internal IT. This hands-on practitioner-leader role reports to the CTO and emphasizes security strategy and execution in a global, fast-growing environment.

Based in Helsinki, the role is hybrid, with flexibility for remote days. The candidate will manage security programs, incident response, compliance (ISO 27001, SOC 2, GDPR) and a security analyst. EU eligibility preferred.