Hybrid Information Security Manager, GRC

at SEB

• Job title: Information Security Manager, GRC
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: €3,900 - €5,800 per month
• Degree requirement: Bachelor's Degree
• Location requirements: Hybrid, Tallinn, Estonia

About the role

• Information Security Manager overseeing cybersecurity and compliance in SEB's Baltic region. Enhancing security frameworks and leading initiatives to combat evolving cyber threats.

Responsibilities

• Lead the improvements of the Information Security Management System (ISMS), ensuring it scales with organizational growth and the evolving threat landscape.
• Design and implement processes for identifying and treating ICT Risks in strict alignment with Non-Functional Requirements (NFR) and ICT frameworks.
• Perform security risk assessments for business and technology initiatives, ensuring security standards are met.
• Oversee the third-party assurance framework ensuring third-party vendors comply with security policies and requirements.
• Translate complex regulations (GDPR, DORA, NIS2) into actionable internal control sets. Respond to enquiries from regulatory bodies and audit institutions.
• Participate during security incidents, specifically managing the regulatory and data protection implications of Data Breaches and Third-Party incidents.
• Participate in security awareness and training programs for both employees and third parties to foster a risk-aware culture.
• Developing and presenting high-level security posture dashboards, risk heatmaps, and compliance roadmaps to stakeholders.

Requirements

• At least 5+ years of experience in the Information Security field, with a specialized focus on the GRC domain.
• Experience in designing and implementing security processes and frameworks, rather than just maintaining them.
• Ability to lead and manage large-scale security initiatives and complex projects from conception to completion.
• Ability to translate technical cyber risks into business impact for high-level stakeholders.
• Experience in navigating regulatory and legal complexities.
• Good communication and teamwork skills.
• Ability to work well under minimal supervision.
• Have a strong drive for improvements.
• Professional information security certifications.
• Fluency in **English **and at least one of local **Baltic language** (Latvian, Lithuanian or Estonian), with excellent verbal and written communication skills.

Benefits

• Interesting and challenging work in highly professional international team.
• Friendly and welcoming culture.
• Hybrid way of working.
• Extensive opportunities for professional development.
• Attractive compensation and benefits.
• Challenging, cutting-edge work.