Manager - Information Security (Compliance)

About the role

Basware is seeking a Manager – Information Security (Compliance) to lead its security compliance program. The role bridges governance, risk management, and stakeholder engagement, ensuring robust security practices across the organization and for its customers.

Key responsibilities

• Manage the Security Advisory process, handling due‑diligence questionnaires, information requests, and security queries from customers, partners and internal teams.
• Conduct third‑party security risk assessments, maintain the information security risk register, and support business continuity activities.
• Plan, coordinate and execute internal information‑security audits, record findings, and monitor corrective actions.
• Support external audits by gathering evidence, engaging control owners and responding to auditor queries.
• Develop and deliver security training and communications to foster a positive security culture.

Required profile

• Minimum two years of experience in information security or security compliance.
• Strong written and verbal communication skills with the ability to explain security requirements to technical and non‑technical audiences.
• Proven stakeholder‑management and influencing abilities, capable of securing commitment to agreed actions.
• Effective project‑management and organisational skills, able to handle competing priorities independently and collaboratively.

Required skills

• Knowledge of ISO/IEC 27002, PCI DSS, NIST Cybersecurity Framework and ISAE standards.
• Practical experience with information‑security risk management, including identification, assessment, treatment and reporting.
• Experience supporting internal or external audits, evidence collection and remediation tracking.
• Familiarity with AI tools, frameworks or applications is considered a strong asset.