Senior ICT Specialist, Security

About the role

The Senior ICT Specialist, Security will join Qt Group’s IT / Information Security team to protect the company’s expanding product portfolio and integrated acquisitions. Reporting to IT leadership, you will work closely with Operations, R&D, Legal, People & Culture and external auditors to keep the organisation secure.

Key responsibilities

• Own and operate core security controls such as endpoint protection, identity and access management, SIEM and related tooling.
• Lead vulnerability management and act as a key responder in the security incident response process, including post‑incident reviews.
• Maintain and evolve the ISO/IEC 27001 ISMS – policies, risk assessments, Statement of Applicability – and support internal and external audits.
• Own security of cloud environments (AWS, Microsoft, Google) and serve as security liaison for key IT vendors.
• Track regulatory change (CRA, NIS2, CMMC Level 2, GDPR, ISO/IEC 42001) and translate it into concrete actions with Legal and the DPO.
• Support colleagues across Qt Group on security questions, customer questionnaires and run security awareness activities.

Required profile

• 5–8 years of hands‑on experience in information or cyber security, preferably in a corporate or multi‑site technology environment.
• Proven track record in at least two areas such as security operations, ISMS/ISO 27001, cloud security, vulnerability and incident management, or vendor security.
• Builder’s mindset – you own problems end‑to‑end, weigh risk against business impact and stay calm under incident conditions.
• Strong collaboration skills and fluent written and spoken English.

Required skills

• Identity platforms (Entra ID) and IAM tooling.
• Endpoint protection and endpoint security solutions.
• Firewalls, VPN/SASE technologies.
• SIEM and related security monitoring tools.
• Vulnerability management and incident response processes.
• Cloud security for AWS, Microsoft 365 (Defender, Purview, Intune).
• Working knowledge of ISO/IEC 27001, NIST CSF, CIS Controls and GDPR.

What we offer

• Hybrid working model with flexible hours.
• Wellbeing support including mental‑health resources and physical‑wellness programs.
• Opportunities for professional growth through mentorship, hands‑on learning and international collaboration.
• Inclusive culture that values diverse perspectives.
• Competitive compensation and benefits package.