Senior Security Governance & Incident Leader — Hybrid

Tieto Corp.; Solna kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Tieto Banktech is seeking an experienced Security Manager to own security governance across our Credit & Wealth unit, protecting SaaS platforms and development environments. Lead security operations, incident response, risk management, and regulatory compliance while challenging technical teams on security implementation.

The role requires engagement with engineering, cloud, and infrastructure teams to strengthen security posture and embed secure practices across delivery.

Qualifications

• 8+ years in security within software/SaaS environments
• Experience in regulated financial services is preferred
• Strong documentation and audit-ready materials

Responsibilities

• Lead security incident management for Product Development and SaaS/Managed Services
• Own incident response processes including detection, containment, eradication, recovery, and post-incident analysis
• Coordinate with product owners, architects, engineering, SRE/Ops, and service managers
• Ensure root cause analysis, corrective actions and preventive controls
• Maintain audit-ready incident documentation per regulatory expectations
• Develop and evolve security framework for the business unit across information, cloud, and product security

Skills

Security governance

Incident response

Risk assessment

Regulatory compliance

Cloud security

DevSecOps

Security incident handling

Security architecture

Auditing/documentation

Education

Bachelor's or Master's in CS/Software Engineering/Cybersecurity

Tools

ISO 27001

SOC 1/SOC 2

ISO 9001/ISO 14001

Job description

Tieto Banktech is seeking an experienced Security Manager to own security governance across our Credit & Wealth unit, protecting SaaS platforms and development environments. Lead security operations, incident response, risk management, and regulatory compliance while challenging technical teams on security implementation.

The role requires engagement with engineering, cloud, and infrastructure teams to strengthen security posture and embed secure practices across delivery.