Hybrid Head of Operational Risk, Information Security

at Pliant Plastics Corporation

• Job title: Head of Operational Risk, Information Security
• Job type: Full Time
• Experience level: Lead
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Location requirements: Hybrid, Helsinki, Finland

About the role

• Head of Operational Risk & Information Security at Pliant responsible for compliance with risk management frameworks. Leading a team to enhance operational resilience and information security governance.

Responsibilities

• Lead the development and continuous improvement of Pliant’s Operational Risk and Information Security Frameworks
• Maintain governance, control, and reporting structures aligned with Pliant Oy’s EMI obligations and group-wide needs
• Act as the 2nd Line of Defence lead, providing independent oversight, assurance, and challenge across all entities
• Manage and mentor a team of risk and IT security specialists
• Advise senior management, the Risk Committee, and the Board on operational resilience and ICT/security risk
• Own the enterprise-wide incident management framework covering ICT and non-ICT incidents
• Maintain a consistent incident classification, escalation, and reporting structure across jurisdictions
• Lead post-incident reviews and root cause analyses
• Ensure compliance with major incident notification obligations under PSD2 and DORA
• Maintain and enhance Pliant’s Information Security Management System (ISMS)
• Develop and enforce information security policies and controls that support business goals and regulatory requirements
• Oversee cyber incident detection, analysis, and response
• Coordinate Business Continuity Management (BCM) across the group
• Conduct and maintain Business Impact Analyses (BIAs)
• Oversee the outsourcing and third-party risk management framework in line with EBA Guidelines
• Serve as the primary point of contact for operational risk and information security matters with regulatory bodies

Requirements

• Bachelor’s or Master’s degree in Information Security, Risk Management, Computer Science, or a related discipline
• 5+ years of experience in operational risk, ICT risk, or information security management, ideally within financial services, fintech, or EMI
• Demonstrated experience implementing or managing ISO 27001, SOC 2, and PCI DSS frameworks
• Strong knowledge of EBA, DORA, and PSD2 operational and ICT risk requirements
• Proven ability to lead a small team and engage effectively across Technology, Operations, and Compliance functions
• Excellent communication, stakeholder management, and presentation skills at all levels.

Benefits

• Attractive remuneration
• Flexibility and possibility to work remotely
• Company card with a monthly allowance for lunches, coffee, etc. with co-workers
• Opportunity to develop your talent in a dynamic team with ambitious goals
• Flat hierarchy and transparent communication in a relaxed, professional atmosphere