Information Security Manager (Governance, Risk, and Compliance)

We're seeking a proactive Information Security Manager to join our security team of four. Smartly has grown from around 400 to 800 employees in the last 3 years. We achieved our ISO 27001 certification three years ago, and we are now working our way towards a SOC 2 Type I and later type II report.

Your primary role involves taking ownership and improving our security management processes in line with the ISO27001 standard and best practices to position Smartly as a responsible and well-run business from a security, privacy, and compliance perspective. 

While our current security team members specialize more in technical areas, they also actively contribute to security management. Thus, if you are not fully familiar with all parts of the domain, you can rely on the collective experience and support of our team to help you grow and excel in this role.

If you possess the hands-on skills to bring our security management to the next level and are keen on championing our defense against organizational cyber threats, then we'd love to hear from you.

Your responsibilities… 

• Work towards making our information security management practices more scalable and efficient
• Support our office teams in managing physical security risk
• Take ownership of customer security requirements and helping in their auditing efforts
• Assess risk arising from third-parties, vendors and partners in our ecosystem and design controls to mitigate such risks

What we’re looking for… 

• Ambition to change processes and build better practices
• Familiarity with the ISO27001 standard and the SOC 2 framework
• To think about problems from an out-of-the-box perspective, without immediately defaulting to industry norms
• Strong communication skills and a natural inclination to collaborate
• Ability to work from our Helsinki office 2 times per week (more if you want!)

Bonus points for any one of these… 

• Experience in improving security processes in a company transitioning from some hundreds of employees to close to a thousand employees
• Experience in managing physical security and/or organization wide security awareness training
• Experience in bringing security activities into software development through security champions
• Experience in facilitating workshops to identify and assess risks

What We Offer You:

• Inclusive Culture: Join a team of over 750 Smartlies representing more than 60 nationalities across 24 locations in 13 countries, we foster a culture built on trust, transparency, and open feedback.
• Global Impact: Be part of a company making a global impact, directly influencing our customers and business growth.
• Wellbeing Focus: Enjoy generous healthcare packages, mental health services, and a healthy work-life balance with paid holidays and family leave.
• Total Rewards: Benefit from equity options, performance-based rewards, competitive compensation, and ample career development opportunities.
• Hybrid Workplace: Experience the flexibility of a hybrid work model, balancing office and remote work, with the option to work abroad for up to 30 days.

Smartly is committed to being the best place to work for growth-minded individuals to thrive - explore more in our Culture Handbook!

#LI-SL #LI-Hybrid