Information Security Officer – Governance, Risk & Compliance
ICEYEEarth Observation company
Espoo, FinlandSenior
Legal & Compliance
About the role
TL;DR
Information Security Officer for Governance, Risk & Compliance in Espoo, Finland.
- •Own and mature ICEYE's Security Governance, Risk and Compliance program across multiple countries and regulators.
- •Ensure compliance with frameworks like ISO 27001, NIS2, NIST, and CRA to maintain credibility with government and defense agency customers.
- •Key Responsibilities Own and improve ICEYE's ISO 27001 ISMS, including risk assessments and audits.
- •Track and operationalize NIS2 obligations and assess the Cyber Resilience Act (CRA).
- •Maintain compliance views across multiple jurisdictions and frameworks.
- •Run third-party risk assessments and support client due diligence.
- •Prepare compliance and risk reporting for senior leadership.
- •Requirements Proven hands-on experience with ISO 27001 implementation or maintenance.
- •Working knowledge of NIS2 and familiarity with NIST frameworks.
- •Awareness of the Cyber Resilience Act (CRA).
- •Experience building risk registers and conducting risk assessments.
- •Relevant certification (CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).
Required skills
Risk ManagementCompliance Management
Domain expertise
cybersecuritydefenseaerospace