Senior Manager, Information Security & GRC Programs

BDO; Tampere; Hybrid; EUR 116,000 - 160,000; Full time

Job summary

BDO seeks a Senior Manager, Information Security to lead governance, risk, and compliance programs ensuring policy enforcement and regulatory alignment. You will oversee risk assessments, audits, and vendor security evaluations, while guiding a high‑performing team across IT, Legal, and risk functions.

The role requires deep GRC experience, strong leadership, and the ability to drive enterprise risk mitigation in a cross‑functional, fast‑paced environment.

Qualifications

• Bachelor’s degree in IT or cybersecurity or related field.
• 10+ years in IT security or risk management with 2+ years leading teams.
• Certifications: CISSP, CISM, CRISC, CISA, or CGEIT preferred.
• Proficiency with GRC tools and IAM, cloud security, SIEM, and ITSM tools.
• Strong leadership, communication, stakeholder engagement, and decision-making abilities.

Responsibilities

• Lead IT security governance, risk, and compliance programs.
• Develop and execute strategy for governance, risk, and compliance.
• Oversee risk assessments, audits, and vendor security evaluations.
• Enforce policies, standards, procedures, and guidelines.
• Conduct security assessments of vendors and cloud providers.
• Oversee GRC platform deployment and monitoring.
• Deliver cybersecurity awareness training and manage programmes.
• Act as trusted advisor to executives on IT risk and compliance.

Skills

Leadership

Stakeholder engagement

Problem-solving

Decision-making

Communication

Strategic thinking

Team management

Risk management

Regulatory awareness

Education

Bachelor's degree in Information Technology/Cybersecurity

Tools

GRC tools

Identity/Access Management (LDAP/AD, SAML, OIDC)

Cloud security

SIEM

Vulnerability management

ITSM platforms

Job description

BDO seeks a Senior Manager, Information Security to lead governance, risk, and compliance programs ensuring policy enforcement and regulatory alignment. You will oversee risk assessments, audits, and vendor security evaluations, while guiding a high‑performing team across IT, Legal, and risk functions.

The role requires deep GRC experience, strong leadership, and the ability to drive enterprise risk mitigation in a cross‑functional, fast‑paced environment.