Security Manager - Credit & Wealth

Job Description

Tieto Banktech is a leading financial services software, and solutions partner in the Nordics, delivering modular, pre-integrated Banking-as-a-Service platforms and mission-critical software for core banking, payments, credit, cards, fraud prevention, and wealth management. Our solutions operate in highly regulated, high-availability environments where security, resilience, and compliance are non-negotiable.

Security is fundamental to the trust our customers place in our products and services. We are looking for an experienced Security Manager to take ownership of security governance across our Credit & Wealth business unit, protecting our SaaS platforms, development environments, and operational services.

This is a security governance and leadership role that requires a strong understanding of the technical craft of security management. You will oversee security operations, incident response, risk management, and regulatory compliance, while being able to engage with and challenge technical teams on how security is implemented in practice. Working closely with Banktech Security, engineering, cloud and infrastructure teams, and other key control functions, you will strengthen our security posture and embed security into how we build and operate our services.

As Security Manager, you will:

Security Operations & Incident Response

• Act as Lead Security Incident Manager for Product Development and SaaS / Managed Services
• Own and drive security incident response processes, including detection, containment, eradication, recovery, and post‑incident analysis
• Coordinate technical resolution with product owners, architects, engineering teams, site reliability / operations, and service managers
• Ensure proper root cause analysis (RCA), corrective actions, and preventive controls are identified and implemented
• Maintain accurate and complete incident documentation in line with audit and regulatory expectations

Security Governance & Risk Management

Own and evolve the security framework for the business unit, covering:

• Information security
• Cloud and application security
• Product development security (SDLC / DevSecOps)
• Physical and operational security
• Business continuity and resilience
• Perform risk assessments and threat analysis across systems, services, and processes
• Translate risk findings into concrete technical and procedural controls
• Support and contribute to BCP/DR planning, technical resilience testing, and operational continuity activities

Security Enablement

• Provide technical security guidance to product development, platform, and operations teams
• Embed security requirements into architecture decisions, technical designs, and delivery processes
• Drive security awareness and training, with a focus on secure development and operational practices
• Act as the primary security escalation and advisory contact for the business unit

Who you are

Experience & Background

• +8 years of experience in security roles within software development and SaaS / managed service environments
• Strong experience in:
  • Security incident handling and forensics collaboration
  • Risk assessment and control design
  • Security governance in large, complex organizations
• Experience from financial services, banking, or another highly regulated industry.
• Experience working with customer, audit, and regulatory security requirements.

Technical & Professional Skills

• Strong understanding of software development, platforms, infrastructure, and cloud security concepts.
• Good understanding of secure SDLC and DevSecOps practices and the ability to assess how security is implemented throughout the development lifecycle.
• Experience working with relevant standards and assurance frameworks, such as:
  • ISO 27001
  • SOC 1 / SOC 2
  • Integrated management systems, including ISO 9001 and ISO 14001
• Experience implementing, governing, or maintaining security compliance programs and certifications.
• Strong documentation skills with the ability to produce clear, audit-ready material.
• Degree in Computer Science, Software Engineering, Cybersecurity, or a related discipline, or equivalent relevant experience.

Personal Profile

• Customer-focused with strong business acumen.

• Clear and structured communicator with strong spoken and written English.
• Credible and confident advisor to engineers, product managers, customers, and senior stakeholders.
• Able to challenge constructively and drive security requirements to resolution.
• Pragmatic and able to balance security, regulatory requirements, availability, resilience, and business needs.

We offer

We offer you professional growth, meaningful projects, open culture and an outstanding work-life balance! We offer you an opportunity to create the future of a growing, fast-developing and important sector. We believe that our organizational culture is an important part of enabling you to be successful. We provide a flexible hybrid work model as part of our culture and way of working. Finally, we also believe in curiosity and learning as a lifestyle where you need to unlearn and relearn every day as new possibilities emerge.

Did we get you inspired? 

We look forward to your application!
Interviews will be held continuously, so we encourage you to apply today! For more information or questions, please contact Talent Acquisition team [email protected]

Hope to hear from you soon!

We perform background checks on all final candidates.   

Tieto declines calls from recruitment companies.

Qualifications

Additional Information

At Tieto, we believe in the power of diversity, equity, and inclusion. We encourage applicants of all backgrounds, genders (m/f/d), and walks of life to join our team, as we believe that this fosters an inspiring workplace and fuels innovation. Our commitment to openness, trust, and diversity is at the heart of our mission to create digital futures that benefit businesses, societies, and humanity.
Diversity, equity and inclusion | Sustainability | Tieto

Stay alert to recruitment scams:
• Tieto only communicates via @tieto.com email addresses.
• We never ask candidates to pay fees or share financial details during recruitment.
• If you receive a suspicious message claiming to be from Tieto, don't respond — verify it via our official careers site.
• For more information visit Important Advisory Regarding Recruitment Fraud | Tieto Blog