Security Manager

Job Description

Tieto Banktech is a leading financial services software, and solutions partner in the Nordics, delivering modular, pre-integrated Banking-as-a-Service platforms and mission-critical software for core banking, payments, credit, cards, fraud prevention, and wealth management. Our solutions operate in highly regulated, high-availability environments where security, resilience, and compliance are non-negotiable.

Security is fundamental to the trust our customers place in our products and services. We are looking for an experienced Security Manager to take ownership of security governance across our Credit & Wealth business unit, protecting our SaaS platforms, development environments, and operational services.

This is a security governance and leadership role that requires a strong understanding of the technical craft of security management. You will oversee security operations, incident response, risk management, and regulatory compliance, while being able to engage with and challenge technical teams on how security is implemented in practice. Working closely with Banktech Security, engineering, cloud and infrastructure teams, and other key control functions, you will strengthen our security posture and embed security into how we build and operate our services.

As Security Manager, you will:

Security Operations & Incident Response

• Act as Lead Security Incident Manager for Product Development and SaaS / Managed Services
• Own and drive security incident response processes, including detection, containment, eradication, recovery, and post‑incident analysis
• Coordinate technical resolution with product owners, architects, engineering teams, site reliability / operations, and service managers
• Ensure proper root cause analysis (RCA), corrective actions, and preventive controls are identified and implemented
• Maintain accurate and complete incident documentation in line with audit and regulatory expectations

Security Governance & Risk Management

Own and evolve the security framework for the business unit, covering:

• Information security
• Cloud and application security
• Product development security (SDLC / DevSecOps)
• Physical and operational security
• Business continuity and resilience
• Perform risk assessments and threat analysis across systems, services, and processes
• Translate risk findings into concrete technical and procedural controls
• Support and contribute to BCP/DR planning, technical resilience testing, and operational continuity activities