About the company
ICEYE is the world leader in sovereign intelligence from space, operating the world's largest SAR satellite constellation. Founded and headquartered in Finland, with over 1000 employees globally.
Responsibilities
- Translate clients' and national security requirements into ICEYE internal requirements across product, IT and other functions
- Ensure evidence of compliance, preferably as compliance-as-code
- Support Product, Missions business line, PMO and Sales on client requirements and accreditation material
- Continuously improve ICEYE's ISO 27001 ISMS, including risk assessments, risk register, Statement of Applicability, internal audits and certification cycles
- Track and operationalise NIS2, CRA and other EU product security obligations
- Prepare compliance and risk reporting for senior leadership
- Maintain information security policies, standards and documentation
- Act as point of contact for external auditors, certification bodies and regulators
Requirements
- Eligible for Personal Security Clearance and EU citizenship or permanent residency
- Technical skills to interpret compliance requirements towards product, including modern software architecture and development concepts
- Proven hands-on experience running ISO 27001 in a real organisation
- Working knowledge of NIS2, CRA and their practical controls and reporting
- Strong stakeholder management and ability to influence without formal authority
- Experience building or maintaining a risk register and running quantified risk assessments
- Awareness of AI governance frameworks (ISO 42001, NIST AI RMF, EU AI Act) and NIST frameworks
Conditions
- Permanent employment, hybrid model in Espoo, Finland
- Employment subject to applicable security screening (incl. SUPO)