Specialist, Cyber Assurance

Outokumpu Stainless Oy; Tornio; On-site; EUR 60,000 - 90,000; Full time

Job summary

Outokumpu Stainless Oy is seeking a motivated Specialist to join our Cyber Assurance team in Finland. You will develop and enforce information security strategies, assess vendors, manage cyber risks, and collaborate with IT and OT teams to strengthen controls.

The role emphasizes ownership, cross-functional teamwork, and ongoing learning in a multicultural environment. We value proactive problem solving, strong English communication, and the ability to thrive in a dynamic, global cybersecurity

Qualifications

• Knowledge of IEC 62443, ISO 27001/2, NIST, CIS and NIS2 privacy regulations.
• Several years of security experience; junior candidates welcome.
• Willingness to learn IT, OT, and IoT security domains.
• Ability to own and implement ideas.
• Experience in cross-organizational projects and stakeholder management.
• Excellent English; other languages a plus.
• Cybersecurity certifications (CISM, CRISC, CISSP) advantageous.

Responsibilities

• Develop and enforce information security continuity and risk management strategies.
• Assess third-party vendors for cyber risks and draft contractual cyber agreements.
• Monitor vendors against cyber security agreements in IT and OT.
• Lead cyber risk management initiatives.
• Identify risks and vulnerabilities and develop remediation plans.
• Perform gap analyses and define strategies for security resilience.
• Recommend controls based on internal standards and industry best practices.
• Ensure milestones and control activities are documented.
• Research new cyber regulations and assess impact.
• Serve as a point of contact for stakeholders to enable other teams.

Skills

Cybersecurity standards

NIST

ISO 27001/2

IEC 62443

NIS2

Stakeholder management

English communication

Multicultural teamwork

Independent work

Cybersecurity certifications

Job description

Outokumpu is seeking motivated Specialist to join our Cyber Assurance team. In this role, you'll play a crucial part in supporting and strengthening our security controls, while pushing the boundaries of cyber security within our organization. At Outokumpu, we are proud of our global Cyber Security team, which collaborates closely with various departments, including IT, business, to maintain exemplary security policies, frameworks, and controls. Join us to contribute your ideas and expertise in a collaborative environment where you can make a significant impact.

What You'll Do:

• Develop, update, and enforce information security service continuity and cyber risk management strategies.
• Assess third party vendors for potential vendors cyber risks and implement contractual cyber agreements with chosen vendors.
• Monitor and evaluate established vendors in IT and OT against cyber security agreements in place.
• Take the lead in managing our cyber risks.
• Identify cyber risks and vulnerabilities through thorough risk assessments and analysis and develop effective corrective actions and remediation plans.
• Conduct gap analyses to determine the current status of security and risk management and define strategies for security resilience.
• Recommend and implement robust security controls based on internal standards and industry best practices.
• Ensure all periodical milestones and control activities are completed and documented promptly.
• Proactively research new cyber regulations and compliance topics to understand if Outokumpu is impacted or not.
• Act as a valuable point of contact for both internal and external stakeholders, providing guidance and support to enable the success of other teams and functions.

Requirements and Qualifications:

• Basic knowledge of industry-leading Cybersecurity standards and frameworks such as IEC 62443, ISO 27001/2, NIST, CIS, as well as privacy regulations like NIS2.
• Security background with a few years of experience; junior candidates welcome.
• Eagerness to learn and expand expertise in IT, OT, and IoT security domains.
• Ability to take ownership and effectively implement ideas.
• Experience in cross-organizational projects and stakeholder management.
• Proficiency in thriving within a multicultural matrix organization.
• Excellent English communication skills; additional languages are a plus.
• Self-motivated, capable of working independently and collaboratively.
• Cybersecurity certifications like CISM, CRISC and CISSP are advantageous.