Firemind
Director of IT and Compliance
FiremindFinland13 days ago
Full-timeInformation Technology

We are seeking an experienced and strategic leader to serve as Director of IT and Compliance. This role will oversee internal security and compliance, IT operations, audits (internal and external), group risk management, and corporate insurance coverage. As a multinational position, it requires deep expertise in working across diverse jurisdictions, with proven experience managing international operations and regulatory compliance across multiple countries. The successful candidate will ensure the organization maintains robust security controls, complies with global standards and legislation, and has effective risk and insurance coverage in place to safeguard the business and enable sustainable growth.


Job Details:

Security & Compliance

  • Lead the design, implementation, and continuous improvement of the company’s global information security and compliance strategy.
  • Ensure compliance with international, regional, and country-specific regulations (e.g., GDPR, HIPAA, UK/EU data protection, and other national frameworks).
  • Develop, implement, and enforce security policies, procedures, and standards across all jurisdictions.
  • Promote a strong culture of security and compliance through training, awareness, and executive engagement.

Internal IT

  • Direct internal IT operations across multiple countries, ensuring systems and infrastructure are secure, resilient, and aligned with business needs.
  • Implement best practices for endpoint security, access and identity management, and data protection across distributed teams.
  • Partner with international business units to drive business continuity, disaster recovery, and incident response.

Audits

  • Oversee preparation and execution of internal and external audits with international scope.
  • Ensure audit readiness, manage remediation, and drive continuous control improvements.
  • Serve as the primary liaison with auditors, regulators, and third-party assessors worldwide.

Risk Management & Insurance

  • Establish and maintain a Group Risk Management framework to identify, evaluate, and mitigate risks across geographies.
  • Collaborate with business leaders to monitor and report on risk exposure, mitigation strategies, and incident trends.
  • Ensure the company maintains comprehensive and adequate insurance coverage aligned with global operations, legal obligations, and strategic objectives.
  • Regularly review and optimize insurance policies to reflect evolving business operations and regulatory landscapes.

Customer Consulting

  • Act as a subject matter expert to support customer projects that require specialized security, compliance, risk, or audit-related expertise.
  • Provide advisory services to customers on best practices, regulatory compliance, and risk management strategies, ensuring alignment with their project goals and industry standards.
  • Represent the company’s competencies in customer engagements, contributing to trust, credibility, and long-term partnerships.


Requirements:


  • 10+ years of experience in security, compliance, IT management, or risk governance, with 5+ years in a leadership role overseeing multinational operations.
  • Strong knowledge of international legislation and proven ability to navigate diverse regulatory frameworks.
  • Hands-on experience with IT operations in global organizations.
  • Demonstrated success managing internal and external audits with international scope.
  • Expertise in enterprise risk management principles and corporate insurance management.
  • Experience in consulting or advising external stakeholders on security, compliance, or risk-related topics preferred.
  • Outstanding leadership, communication, and cross-cultural stakeholder management skills.

Key Skills

Ranked by relevance