Security Manager, Credit & Wealth – Tieto Banktech (m/f/d)

Tieto Corp.; Solna kommun; Hybride; SEK 900 000 - 1 200 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Résumé du poste

Tieto Banktech is seeking an experienced Security Manager to own security governance across our Credit & Wealth unit, protecting SaaS platforms and development environments. Lead security operations, incident response, risk management, and regulatory compliance while challenging technical teams on security implementation.

The role requires engagement with engineering, cloud, and infrastructure teams to strengthen security posture and embed secure practices across delivery.

Qualifications

• 8+ years in security within software/SaaS environments
• Experience in regulated financial services is preferred
• Strong documentation and audit-ready materials

Responsabilités

• Lead security incident management for Product Development and SaaS/Managed Services
• Own incident response processes including detection, containment, eradication, recovery, and post-incident analysis
• Coordinate with product owners, architects, engineering, SRE/Ops, and service managers
• Ensure root cause analysis, corrective actions and preventive controls
• Maintain audit-ready incident documentation per regulatory expectations
• Develop and evolve security framework for the business unit across information, cloud, and product security

Connaissances

Security governance

Incident response

Risk assessment

Regulatory compliance

Cloud security

DevSecOps

Security incident handling

Security architecture

Auditing/documentation

Formation

Bachelor's or Master's in CS/Software Engineering/Cybersecurity

Outils

ISO 27001

SOC 1/SOC 2

ISO 9001/ISO 14001

Description du poste

Job Description

Tieto Banktech is a leading financial services software, and solutions partner in the Nordics, delivering modular, pre-integrated Banking-as-a-Service platforms and mission-critical software for core banking, payments, credit, cards, fraud prevention, and wealth management. Our solutions operate in highly regulated, high-availability environments where security, resilience, and compliance are non-negotiable.

Security is fundamental to the trust our customers place in our products and services. We are looking for an experienced Security Manager to take ownership of security governance across our Credit & Wealth business unit, protecting our SaaS platforms, development environments, and operational services.

This is a security governance and leadership role that requires a strong understanding of the technical craft of security management. You will oversee security operations, incident response, risk management, and regulatory compliance, while being able to engage with and challenge technical teams on how security is implemented in practice. Working closely with Banktech Security, engineering, cloud and infrastructure teams, and other key control functions, you will strengthen our security posture and embed security into how we build and operate our services.

As Security Manager, you will:

Security Operations & Incident Response

• Act as Lead Security Incident Manager for Product Development and SaaS / Managed Services
• Own and drive security incident response processes, including detection, containment, eradication, recovery, and post‑incident analysis
• Coordinate technical resolution with product owners, architects, engineering teams, site reliability / operations, and service managers
• Ensure proper root cause analysis (RCA), corrective actions, and preventive controls are identified and implemented
• Maintain accurate and complete incident documentation in line with audit and regulatory expectations

Security Governance & Risk Management

Own and evolve the security framework for the business unit, covering:

• Information security
• Cloud and application security
• Product development security (SDLC / DevSecOps)
• Physical and operational security
• Business continuity and resilience
• Perform risk assessments and threat analysis across systems, services, and processes
• Translate risk findings into concrete technical and procedural controls
• Support and contribute to BCP/DR planning, technical resilience testing, and operational continuity activities

Security Enablement

• Provide technical security guidance to product development, platform, and operations teams
• Embed security requirements into architecture decisions, technical designs, and delivery processes
• Drive security awareness and training, with a focus on secure development and operational practices
• Act as the primary security escalation and advisory contact for the business unit

Who you are

Experience & Background

• +8 years of experience in security roles within software development and SaaS / managed service environments
• Strong experience in:
  • Security incident handling and forensics collaboration
  • Risk assessment and control design
  • Security governance in large, complex organizations
• Experience from financial services, banking, or another highly regulated industry.
• Experience working with customer, audit, and regulatory security requirements.

Technical & Professional Skills

• Strong understanding of software development, platforms, infrastructure, and cloud security concepts.
• Good understanding of secure SDLC and DevSecOps practices and the ability to assess how security is implemented throughout the development lifecycle.
• Experience working with relevant standards and assurance frameworks, such as:
  • ISO 27001
  • SOC 1 / SOC 2
  • Integrated management systems, including ISO 9001 and ISO 14001
• Experience implementing, governing, or maintaining security compliance programs and certifications.
• Strong documentation skills with the ability to produce clear, audit-ready material.
• Degree in Computer Science, Software Engineering, Cybersecurity, or a related discipline, or equivalent relevant experience.

Personal Profile

• Customer-focused with strong business acumen.
• Clear and structured communicator with strong spoken and written English.
• Credible and confident advisor to engineers, product managers, customers, and senior stakeholders.
• Able to challenge constructively and drive security requirements to resolution.
• Pragmatic and able to balance security, regulatory requirements, availability, resilience, and business needs.

We offer

We offer you professional growth, meaningful projects, open culture and an outstanding work-life balance! We offer you an opportunity to create the future of a growing, fast-developing and important sector. We believe that our organizational culture is an important part of enabling you to be successful. We provide a flexible hybrid work model as part of our culture and way of working. Finally, we also believe in curiosity and learning as a lifestyle where you need to unlearn and relearn every day as new possibilities emerge.

Additional Information

At Tieto, we believe in the power of diversity, equity, and inclusion. We encourage applicants of all backgrounds, genders (m/f/d), and walks of life to join our team, as we believe that this fosters an inspiring workplace and fuels innovation.Our commitment to openness, trust, and diversity is at the heart of our mission to create digital futures that benefit businesses, societies, and humanity.

We perform background checks on all final candidates.

Tieto declines calls from recruitment companies.