Senior ICT Specialist, Security

About Us Ever wondered what powers the products people rely on every day? Chances are, we've helped build it. Our software and development tools help build products for cars, hospitals, factories, homes, and industries worldwide. We help engineers solve complex challenges and create technology people can depend on. Rooted in Nordic values and trusted by innovators worldwide, we combine deep technical expertise with a culture of curiosity, craftsmanship, and collaboration. With decades of engineering experience and a shared passion for technical excellence, we're helping shape the future of software and embedded development. We take pride in building tools for people who build the world around us. About the Role Our IT / Information Security team keeps Qt Group secure as the company scales across its product lines — Qt Framework, Qt Design Studio, Squish, Coco and Axivion — and integrates IAR Systems into the group. We own the corporate security landscape end to end, from endpoint and identity through to the ISMS and the regulatory obligations our customers depend on. As Senior Security Specialist you will operate our core security controls, drive our ISO/IEC 27001 ISMS forward, and turn regulatory change into concrete action. This is a hands-on senior role reporting into IT leadership, working closely with IT Operations, R&D, Legal, People & Culture, and our external partners and auditors. Possible location for this position is Espoo or Oulu Finland (hybrid). What You’ll Do Own and operate core security controls: endpoint protection, identity and access management, SIEM and related tooling Lead vulnerability management and act as a key responder in our security incident response process, including post-incident reviews Maintain and evolve our ISO/IEC 27001 ISMS — policies, risk assessments, Statement of Applicability — and support internal and external audits Own security of our cloud environments (AWS, Microsoft, Google) and act as security liaison for key IT vendors Track regulatory change (CRA, NIS2, CMMC Level 2, GDPR, ISO/IEC 42001) and translate it into action, partnering with Legal and the DPO Support colleagues across Qt Group on security questions and customer security questionnaires, and run security awareness activities What You Bring to the Table 5–8 years of hands-on experience in information or cyber security, ideally in corporate IT or a multi-site technology company, with a degree in a relevant field or equivalent practical experience A proven track record in at least two of: security operations, ISMS/ISO 27001, cloud security, vulnerability and incident management, vendor security Hands-on experience with identity platforms (Entra ID), endpoint security, firewalls and VPN/SASE, plus AWS and Microsoft 365 security tooling (Defender, Purview, Intune) Working knowledge of ISO/IEC 27001, NIST CSF, CIS Controls and GDPR A builder's mindset — you own problems end to end, weigh risk against business impact, and stay calm under incident conditions Strong collaboration skills and clear written and spoken English; you can work with R&D, Legal, Sales and customers alike Bonus Points For... Familiarity with CRA, NIS2, CMMC Level 2 or ISO/IEC 42001 Certifications such as CISSP, CISM, CISA, OSCP or the Microsoft SC-series Finnish language skills Build What Matters. Grow Where It Matters. We believe work should support your life, not the other way around. That's why our benefits are designed to be flexible, inclusive, and meaningful across every stage of your journey. From wellbeing and growth to celebrating life's big (and small) moments, we invest in what matters to you, wherever you are. Flexibility You Can Count On We offer hybrid working options and flexible hours, empowering you to balance your personal life and professional goals because life outside of work matters, too. Meaningful Wellbeing Support From mental health resources to physical wellness programs, we provide practical, accessible support tailored to local needs.