Specialist, Cyber Assurance

Outokumpu Oyj; Tornio; On-site; EUR 60,000 - 90,000; Full time

Job summary

Outokumpu Oyj seeks a motivated Specialist to join our Cyber Assurance team, strengthening security controls and advancing cybersecurity across the organization. You will collaborate with IT, business, and other departments to uphold exemplary security policies and frameworks.

Based in Europe, you will help drive risk management, vendor assessments, and ongoing control improvements, with limited travel and a focus on safeguarding critical infrastructure.

Qualifications

• Knowledge of industry-leading cybersecurity standards and frameworks such as IEC 62443, ISO 27001/2, NIST, CIS, and privacy regulations like NIS2.
• Security background with a few years of experience; junior candidates welcome.

Responsibilities

• Develop, update, and enforce information security service continuity and cyber risk management strategies.
• Assess third party vendors for cyber risks and implement contractual cyber agreements with chosen vendors.
• Monitor and evaluate established vendors in IT and OT against cyber security agreements in place.
• Take the lead in managing our cyber risks.
• Identify cyber risks and vulnerabilities through thorough risk assessments and analysis and develop effective corrective actions and remediation plans.
• Conduct gap analyses to determine the current status of security and risk management and define strategies for security resilience.
• Recommend and implement robust security controls based on internal standards and industry best practices.
• Ensure all periodical milestones and control activities are completed and documented promptly.
• Proactively research new cyber regulations and compliance topics to understand if Outokumpu is impacted or not.
• Act as a valuable point of contact for both internal and external stakeholders, providing guidance and support to enable the success of other teams and functions.

Skills

Cybersecurity standards

Vendor risk management

English proficient

Cross-functional work

Security certifications

Job description

Outokumpu is seeking motivated Specialist to join our Cyber Assurance team. In this role, you'll play a crucial part in supporting and strengthening our security controls, while pushing the boundaries of cyber security within our organization. At Outokumpu, we are proud of our global Cyber Security team, which collaborates closely with various departments, including IT, business, to maintain exemplary security policies, frameworks, and controls. Join us to contribute your ideas and expertise in a collaborative environment where you can make a significant impact

What You'll Do:

• Develop, update, and enforce information security service continuity and cyber risk management strategies.
• Assess third party vendors for potential vendors cyber risks and implement contractual cyber agreements with chosen vendors.
• Monitor and evaluate established vendors in IT and OT against cyber security agreements in place.
• Take the lead in managing our cyber risks.
• Identify cyber risks and vulnerabilities through thorough risk assessments and analysis and develop effective corrective actions and remediation plans.
• Conduct gap analyses to determine the current status of security and risk management and define strategies for security resilience.
• Recommend and implement robust security controls based on internal standards and industry best practices.
• Ensure all periodical milestones and control activities are completed and documented promptly.
• Proactively research new cyber regulations and compliance topics to understand if Outokumpu is impacted or not.
• Act as a valuable point of contact for both internal and external stakeholders, providing guidance and support to enable the success of other teams and functions.

What We’re Looking For:

• Basic knowledge of industry-leading Cybersecurity standards and frameworks such as IEC 62443, ISO 27001/2, NIST, CIS, as well as privacy regulations like NIS2.
• Security background with a few years of experience; junior candidates welcome.
• Eagerness to learn and expand expertise in IT, OT, and IoT security domains.
• Ability to take ownership and effectively implement ideas.
• Experience in cross-organizational projects and stakeholder management.
• Proficiency in thriving within a multicultural matrix organization.
• Excellent English communication skills; additional languages are a plus.
• Self-motivated, capable of working independently and collaboratively.
• Cybersecurity certifications like CISM, CRISC and CISSP are advantageous.

What We Offer:

• A challenging and rewarding job in an international environment, where you'll play a vital role in securing critical infrastructure.
• Continuous skill development and professional satisfaction through our commitment to your growth.
• The autonomy and trust to take responsibility, be proactive, and work independently.
• Educational programs to expand your skills and knowledge, ensuring you stay at the forefront of the field.
• The chance to contribute to sustainable work that will impact generations to come.

You’ll be based in one of our main hubs in Europe, reporting to our Cyber Risk Manager. Limited travel may be required based on job requirements.

The selected candidate will be required to pass a security clearance vetting and health check (including drug tests) before commencing employment.