Information Security Manager

We take security seriously. In this role, you can help people to take care of their heart by developing CardioSignal software products for next-generation cardiac monitoring. Your main duties will be to ensure that security of the Precordior products is always at the highest level and ensure that Precordior as a company follows high security standards such as ISO27001. Your weekly activities may contain advising projects on their development items, running your own security projects such as audits and reviews, certifications and development items, analyzing and defining privacy requirements of other services, documenting and tracking internal processes. Depending on your interests and skills, your duties may also include enterprise IT management, data protection, technical support for our clinical studies, or participation in SW development. Despite the medical device regulation and quality system we follow, we are a flexible and agile startup.

What we are looking for

We are looking for a motivated Information Security Manager who is able to take a lead in ISMS management in a flexible medical device SME context. We value your ability to drive hands-on information security practices and culture. You keep your security knowledge up-to-date and always find areas to improve security efficiently. You have understanding of software architectures, mobile app platforms and cloud environments. You are not afraid to review software architecture to identify security critical areas and propose how possible security risks can be mitigated. Depending on your skills and interests, your duties may also involve other elements (see below). Balance between these duties will be finetuned based on your interests and skills. As typical for a start-up, your duties will likely evolve over time, so we value that you see this rather as an opportunity than a threat.

Cardiosignal is an AWS native solution with an AWS backend and a Flutter based frontend for iOS and Android. The backend is built following serverless and micro service principles and relies heavily on AWS Lambda functions written in Python. CardioSignal is a medical device and we follow ISO27001 and ISO13485 in our operations, including SW development.

In this role you will:

• Improve efficiency and lead ISMS processes within the company, including guidelines, processes, training and instructions related to security and privacy
• Maintain and develop of our security architecture, including design and rollout of security & privacy related systems, tooling and controls (e.g. identity and access management, security monitoring, cloud security, etc)
• Implement and manage security & privacy practices in product/service development and project management (e.g. security reviews) in collaboration with the experienced development team
• Take care of data protection officer role (GDPR) and related responsibilities
• Follow the processes defined by Precordior’s quality management system
• Work as a part of the distributed team of SW developers, QMS team, product manager, researchers, and other professionals.
• Additional duties (optional) may be:
  • Management of company business IT
  • Supporting our clinical studies (data privacy, data security, technical configurations)
  • Participation in SW development for backend (AWS) or front-end (flutter)

What you will need:

• In depth understanding of and passion on information security
• At least 5 years of experience in the management of security & privacy and cybersecurity activities and processes with proven track record on mastering cybersecurity as integral part of product/service development
• Minimum of Bachelor’s degree or equivalent, Master’s degree preferred
• Hands-on experience in ISO27001, preferably evidenced by ISO/IEC 27001 professional certificate (e.g. internal / lead auditor or lead implementer)
• Enjoy working in a small multidisciplinary development team, have good team working skills and also enjoy working independently
• Good command in English
• Work permit and living in Finland
• Bonus:
  • Experience in a medical field
  • Suitable skills and interests towards some of the optional duties
  • Being able to communicate in Finnish is a plus. 

The last but not least, we place the highest value on having a positive, passionate, responsible and curious person on board, which, in the end, matters the most.

What we offer

We offer fantastic co-workers, purposeful work, a competitive salary and work equipment of your choice. Our office is at the central location of Turku, Finland. You can also work remotely or hybrid but you may need to work at our HQ occasionally with the rest of the team. In our team, you are part of creating and delivering next generation health technology solutions to people globally. In this role, you have a unique opportunity to work in a cross-functional team of technical, medical and business experts. Our company operates globally and we offer a role with reach and opportunity to grow to an internationally recognized expert in the field.

How to apply for this job

Send us your CV with a cover letter through our career portal. Please include when you can start and your salary expectation. Further information about the position: CTO Ilkka Korhonen ([email protected]).

About CardioSignal

We develop groundbreaking solutions for the detection of heart diseases. CardioSignal is a mobile application and a certified medical device for the detection of atrial fibrillation. Originally an academic spinoff, the company’s patented technology is built on a decade of research and algorithm development. CardioSignal is a brand and a product by Precordior. www.cardiosignal.com.