Information Security Manager (GRC) | SEB, Tallinn at seb

seb

Tallinn·10h ago

ManagerFull-time

Salary Range

€3,900 - €5,800 /month

About the Role

We are looking for an Information Security Manager within Governance, Risk and Compliance (GRC) to help SEB stay ahead of the evolving cyber threat landscape. This role involves protecting the interests of SEB Corporate & Private customers while maintaining the highest level of service.

Key Responsibilities

→Lead the improvements of the Information Security Management System (ISMS), ensuring it scales with organizational growth and the evolving threat landscape.
→Design and implement processes for identifying and treating ICT Risks in strict alignment with Non-Functional Requirements (NFR) and ICT frameworks.
→Perform security risk assessments for business and technology initiatives, ensuring security standards are met.
→Oversee the third-party assurance framework ensuring third-party vendors comply with security policies and requirements.
→Translate complex regulations (GDPR, DORA, NIS2) into actionable internal control sets. Respond to enquiries from regulatory bodies and audit institutions.
→Participate during security incidents, specifically managing the regulatory and data protection implications of Data Breaches and Third-Party incidents.
→Participate in security awareness and training programs for both employees and third parties to foster a risk-aware culture.
→Developing and presenting high-level security posture dashboards, risk heatmaps, and compliance roadmaps to stakeholders.

Requirements

✓At least 5+ years of experience in the Information Security field, with a specialized focus on the GRC domain.
✓Experience in designing and implementing security processes and frameworks, rather than just maintaining them.
✓Ability to lead and manage large-scale security initiatives and complex projects from conception to completion.
✓Ability to translate technical cyber risks into business impact for high-level stakeholders.
✓Experience in navigating regulatory and legal complexities.
✓Good communication and teamwork skills.
✓Ability to work well under minimal supervision.
✓Have a strong drive for improvements.
✓Professional information security certifications.
✓Fluency in English and at least one of local Baltic language (Latvian, Lithuanian or Estonian), with excellent verbal and written communication skills.