Specialist, Cyber Assurance

Outokumpu is seeking motivated Specialist to join our Cyber Assurance team. In this role, you'll play a crucial part in supporting and strengthening our security controls, while pushing the boundaries of cyber security within our organization. 

At Outokumpu, we are proud of our global Cyber Security team, which collaborates closely with various departments, including IT, business, to maintain exemplary security policies, frameworks, and controls. Join us to contribute your ideas and expertise in a collaborative environment where you can make a significant impact 

What You'll Do: 

• Develop, update, and enforce information security service continuity and cyber risk management strategies. 
• Assess third party vendors for potential vendors cyber risks and implement contractual cyber agreements with chosen vendors. 
• Monitor and evaluate established vendors in IT and OT against cyber security agreements in place. 
• Take the lead in managing our cyber risks. 
• Identify cyber risks and vulnerabilities through thorough risk assessments and analysis and develop effective corrective actions and remediation plans. 
• Conduct gap analyses to determine the current status of security and risk management and define strategies for security resilience. 
• Recommend and implement robust security controls based on internal standards and industry best practices. 
• Ensure all periodical milestones and control activities are completed and documented promptly. 
• Proactively research new cyber regulations and compliance topics to understand if Outokumpu is impacted or not. 
• Act as a valuable point of contact for both internal and external stakeholders, providing guidance and support to enable the success of other teams and functions. 

What We're Looking For: 

• Basic knowledge of industry-leading Cybersecurity standards and frameworks such as IEC 62443, ISO 27001/2, NIST, CIS, as well as privacy regulations like NIS2. 
• Security background with a few years of experience; junior candidates welcome. 
• Eagerness to learn and expand expertise in IT, OT, and IoT security domains. 
• Ability to take ownership and effectively implement ideas. 
• Experience in cross-organizational projects and stakeholder management. 
• Proficiency in thriving within a multicultural matrix organization. 
• Excellent English communication skills; additional languages are a plus. 
• Self-motivated, capable of working independently and collaboratively. 
• Cybersecurity certifications like CISM, CRISC and CISSP are advantageous. 

What We Offer: 

• A challenging and rewarding job in an international environment, where you'll play a vital role in securing critical infrastructure. 
• Continuous skill development and professional satisfaction through our commitment to your growth. 
• The autonomy and trust to take responsibility, be proactive, and work independently. 
• Educational programs to expand your skills and knowledge, ensuring you stay at the forefront of the field. 
• The chance to contribute to sustainable work that will impact generations to come. 

You'll be based in one of our main hubs in Europe, reporting to our Cyber Risk Manager. Limited travel may be required based on job requirements. 

For more information about the position, please, contact our Cyber Assurance manager – Harri Seppälä via harri.seppala(at)outokumpu.com, or for more information about the status of your application or help to apply: Talent Acquisition Partner – miikka.enbuske(at)Outokumpu.com 

To apply, please submit your CV and a cover letter in English till the 6th of September 2026. The position might be filled before the final application date, thus, please do not hesitate to apply earlier! 

The selected candidate will be required to pass a security clearance vetting and health check (including drug tests) before commencing employment