Information Security Specialist

We are looking for a Information Security Specialist for our clients public sector tender. Customer industry is in Environmental Services. Description: The Information Security Specialist is responsible for developing, maintaining, and monitoring the organizations information security. The specialist ensures that information systems, networks, and services are protected against threats and that information security practices are up to date. Tasks may include: · Preparation and maintenance of information security policies and guidelines · Threat and vulnerability analyses and risk management · Management and reporting of information security incidents · Information security monitoring and audits (e.g., SIEM, SOC) · User training and increasing information security awareness Required Skills: · Experience in information security management and development · Understanding of information security standards and requirements (e.g., ISO 27001, NIS2) · Experience with information security tools and solutions (e.g., SIEM, EDR) · Fluent Finnish and English language skills · Certifications (e.g., CISSP, CISM, Microsoft Security, CompTIA Security+) · Experience in cloud environment security · Knowledge of information security audits and testing Required experience and competence (within the last 60 months) Minimum requirement: 1. Experience in designing and implementing information security solutions: The expert has experience from at least three (3) information security solution design and implementation projects that have included both cloud-based and traditional infrastructure environments. Each assignment has had a scope of at least 30 person-days. 2. Microsoft Sentinel competence: The expert has experience in implementing Microsoft Sentinel, configuring rules and alerts, automation, threat detection, and response in at least two (2) customer assignments. 3. Security of cloud and hybrid environments: The expert has experience in designing and implementing security for modern Microsoft Azure environments, including Conditional Access, identity management, and data protection, in at least two (2) customer assignments. 4. Security of traditional infrastructure: The expert has experience in managing the security of on-premises environments (e.g., firewalls, antivirus, AD security, segmentation) in at least two (2) customer assignments. 5. Threat modeling and risk management: The expert has experience in threat modeling, risk assessment, and planning control measures in at least two (2) customer assignments. 6. Certification: The expert has a valid information security-related certificate, such as Microsoft Cybersecurity Architect Expert, SC-200, CISM or CISSP, Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Security Operations Analyst Associate, Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), AWS Certified Security - Specialty, Google Cloud Certified Professional Cloud Security Engineer, Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), EC-Council Certified Chief Information Security Officer (C|CISO), CompTIA Cybersecurity Analyst (CySA+), CompTIA Advanced Security Practitioner (CASP+), GIAC Certified Incident Handler (GCIH), GIAC Security Essentials Certification (GSEC), Cisco Certified CyberOps Associate, Cisco Certified Network Professional Security (CCNP Security), Certified Ethical Hacker (C|EH), Offensive Security Certified Professional (OSCP). 7. Information security monitoring and response: The expert has experience with SOC operating models, alert handling, and implementing incident response processes in at least one (1) customer assignment. 8. Use of automation tools: The expert has experience with automation tools (e.g., KQL, Logic Apps, PowerShell) supporting information security processes in at least one (1) customer assignment. 9. Information security reporting and documentation: The expert has experience preparing information security reports, supporting audits, and producing documentation in at least one (1) customer assignment. 10. Knowledge of agile methods: The expert has experience applying agile methods (e.g., Scrum, Kanban) in information security projects in at least one (1) customer assignment. The applicant still needs to fill in an Excel sheet where the mandatory requirements must be met. I will send it to the applicant separately! Please apply with your CV in English, clearly showing how you match the requirements and answer to the questions above. The client is continously reviewing candidates and we ask you to submit your application as soon as possible Location: Finland, remote Allocation: Not yet known, we can consider profiles both partly and fully available Timeline: The assignment is expected to be long-term, lasting several years Language: Fluent in Finnish & English We offer you: We offer a versatile assignment where every day is different and interesting. We also offer a very competitive salary and good employee benefits. Are you interested in becoming a part of our dynamic team? The position will be filled as soon as a suitable person is found, so please be quick and submit your application! Please include your salary expectation in your application. For more information, contact Kimmo Kärsämä, tel. 050 412 7500, kimmo.karsama@lokki.fi <mailto:kimmo.karsama@lokki.fi> Explore Lokki, through our blog and website: https://www.lokki.fi/ <https://www.lokki.fi/> . Lokki Henkilöstöpalvelut Oy (Finnish for Seagull Recruitment Services) has been active in providing recruitment services since 2005 and we belong to The Private Employment Agencies Association HPL. Our vision is to provide the best customer experience with our reliable, humane and effortless service around Finland. Our most important asset is a person who, as we know, thrives in a reliable and supportive atmosphere. At Loki you will be supported by your own human resources consultant throughout your employment relationship. At Lokki, we believe in a partnership achieved as a result of flexible service. Explore us and our vacancies: https://www.lokki.fi/. You can also find us on Facebook and Instagram.