Specialist, Cyber Assurance

Outokumpu; Helsinki; On-site; EUR 60,000 - 90,000; Full time

Job summary

Outokumpu is seeking a motivated Cyber Security Specialist to join our Cyber Assurance team in Helsinki. You will strengthen security controls, manage cyber risk, and support cross-functional partners in a multinational environment.

You will work on risk assessments, vendor governance, and the implementation of industry-standard security controls while staying current with evolving regulations. The role offers opportunities for growth within a global security function.

Qualifications

• Familiar with IEC 62443, ISO 27001/2, NIST, CIS, and privacy rules like NIS2.
• Cybersecurity background with some years of experience; junior welcome.
• Willingness to learn IT/OT/IoT security domains.
• Excellent communication; ability to work across cultures.
• Certs like CISM, CRISC, CISSP are a plus.

Responsibilities

• Develop, update, and enforce information security service continuity and cyber risk management strategies.
• Assess third party vendors for potential cyber risks and implement contractual cyber agreements.
• Monitor and evaluate established vendors in IT and OT against cyber security agreements.
• Take the lead in managing our cyber risks.
• Identify cyber risks and vulnerabilities through risk assessments and develop corrective actions.
• Conduct gap analyses to determine current security status and define resilience strategies.
• Recommend and implement robust security controls based on internal standards and best practices.
• Ensure all periodic milestones and control activities are completed and documented promptl
• Proactively research new cyber regulations and compliance topics to understand implications for Outokumpu.
• Act as a point of contact for internal and external stakeholders, guiding other teams.

Skills

Cybersecurity basics

Vendor risk management

Stakeholder management

English communication

Job description

Outokumpu is seeking motivated Specialist to join our Cyber Assurance team. In this role, you'll play a crucial part in supporting and strengthening our security controls, while pushing the boundaries of cyber security within our organization.

At Outokumpu, we are proud of our global Cyber Security team, which collaborates closely with various departments, including IT, business, to maintain exemplary security policies, frameworks, and controls. Join us to contribute your ideas and expertise in a collaborative environment where you can make a significant impact

What You'll Do:

• Develop, update, and enforce information security service continuity and cyber risk management strategies.
• Assess third party vendors for potential vendors cyber risks and implement contractual cyber agreements with chosen vendors.
• Monitor and evaluate established vendors in IT and OT against cyber security agreements in place.
• Take the lead in managing our cyber risks.
• Identify cyber risks and vulnerabilities through thorough risk assessments and analysis and develop effective corrective actions and remediation plans.
• Conduct gap analyses to determine the current status of security and risk management and define strategies for security resilience.
• Recommend and implement robust security controls based on internal standards and industry best practices.
• Ensure all periodical milestones and control activities are completed and documented promptly.
• Proactively research new cyber regulations and compliance topics to understand if Outokumpu is impacted or not.
• Act as a valuable point of contact for both internal and external stakeholders, providing guidance and support to enable the success of other teams and functions.

What We're Looking For:

• Basic knowledge of industry-leading Cybersecurity standards and frameworks such as IEC 62443, ISO 27001/2, NIST, CIS, as well as privacy regulations like NIS2.
• Security background with a few years of experience; junior candidates welcome.
• Eagerness to learn and expand expertise in IT, OT, and IoT security domains.
• Ability to take ownership and effectively implement ideas.
• Experience in cross-organizational projects and stakeholder management.
• Proficiency in thriving within a multicultural matrix organization.
• Excellent English communication skills; additional languages are a plus.
• Self-motivated, capable of working independently and collaboratively.
• Cybersecurity certifications like CISM, CRISC and CISSP are advantageous.

What We Offer:

• A challenging and rewarding job in an international environment, where you'll play a vital role in securing critical infrastructure.
• Continuous skill development and professional satisfaction through our commitment to your growth.
• The autonomy and trust to take responsibility, be proactive, and work independently.
• Educational programs to expand your skills and knowledge, ensuring you stay at the forefront of the field.
• The chance to contribute to sustainable work that will impact generations to come.

You'll be based in one of our main hubs in Europe, reporting to our Cyber Risk Manager. Limited travel may be required based on job requirements.

The selected candidate will be required to pass a security clearance vetting and health check (including drug tests) before commencing employment