Manager, Application Security and Data Protection
- Hiring from
- Finland
- Work type
- Hybrid
- Posted
624,158 remote jobs, straight from company career pages
100% free · New jobs every minute
Show job descriptionHide job description
Application security starts with embedding security into development from the very beginning. In this role, you will help application teams and developers make secure choices and put common application security practices into action across K Group. At the same time, you will develop technical data protection controls and take ownership of the Cloudflare platform.
What will you do?
As Manager, Application Security and Data Protection, you will act as a trusted advisor to application teams, developers and other technical specialists on application security matters. You will help teams identify security risks, interpret common security requirements and find solutions that integrate security into application design, development and the entire application lifecycle.
You will define and maintain application security requirements and secure development practices and support their practical adoption. You will advise application teams on topics such as security assessments, threat modelling and security testing. Your role will focus on consulting, guidance and coordination, while application teams, developers and service providers remain responsible for application development and the execution of technical controls and checks.
You will help make security a natural part of development and release processes. You will support teams in implementing security controls related to areas such as code, dependencies and configurations, as well as in prioritising findings based on risk.
In the area of technical data protection, you will define and coordinate controls related to areas such as data classification, access rights, encryption, retention and secure deletion. You will support application and development teams in interpreting and implementing requirements together with data owners and privacy and legal specialists.
One of the key responsibilities of the role is ownership of the Cloudflare platform. You will be responsible for the platform roadmap, service lifecycle, governance model, access rights and vendor collaboration, as well as monitoring service performance and costs. You will guide and coordinate the use of Cloudflare's security capabilities in line with the agreed service scope.
You will monitor application security and technical data protection risks, the effectiveness of controls and the progress of development initiatives. You will maintain a prioritised development roadmap and ensure that application security, data protection and the Cloudflare service are integrated with ITSM processes.
In this role, you will have a broad impact without direct line management responsibility. Success will depend on your ability to bring the security perspective into discussions at the right time, make requirements understandable and help different teams find appropriate solutions.
To succeed in this role, you need practical knowledge of application security and the ability to use your technical expertise to support other teams.
We Expect You To Have
What will you do?
As Manager, Application Security and Data Protection, you will act as a trusted advisor to application teams, developers and other technical specialists on application security matters. You will help teams identify security risks, interpret common security requirements and find solutions that integrate security into application design, development and the entire application lifecycle.
You will define and maintain application security requirements and secure development practices and support their practical adoption. You will advise application teams on topics such as security assessments, threat modelling and security testing. Your role will focus on consulting, guidance and coordination, while application teams, developers and service providers remain responsible for application development and the execution of technical controls and checks.
You will help make security a natural part of development and release processes. You will support teams in implementing security controls related to areas such as code, dependencies and configurations, as well as in prioritising findings based on risk.
In the area of technical data protection, you will define and coordinate controls related to areas such as data classification, access rights, encryption, retention and secure deletion. You will support application and development teams in interpreting and implementing requirements together with data owners and privacy and legal specialists.
One of the key responsibilities of the role is ownership of the Cloudflare platform. You will be responsible for the platform roadmap, service lifecycle, governance model, access rights and vendor collaboration, as well as monitoring service performance and costs. You will guide and coordinate the use of Cloudflare's security capabilities in line with the agreed service scope.
You will monitor application security and technical data protection risks, the effectiveness of controls and the progress of development initiatives. You will maintain a prioritised development roadmap and ensure that application security, data protection and the Cloudflare service are integrated with ITSM processes.
In this role, you will have a broad impact without direct line management responsibility. Success will depend on your ability to bring the security perspective into discussions at the right time, make requirements understandable and help different teams find appropriate solutions.
To succeed in this role, you need practical knowledge of application security and the ability to use your technical expertise to support other teams.
We Expect You To Have
- at least three years of professional experience in roles involving application security and technical data protection
- strong understanding of secure development practices, common application vulnerabilities, security testing and risk-based remediation
- experience in consulting, supporting or guiding developers, application teams and other technical stakeholders on security matters
- experience in platform or service ownership, as well as hands-on experience with Cloudflare or a comparable application security platform
- fluency in both Finnish and English, as you will work and communicate with different stakeholders in both languages.
You will also benefit from an understanding of web application protection, access management and technical data protection controls.
We do not require a specific educational background. Relevant experience and expertise are what matter most.
What do we offer?
You will take responsibility for application security and technical data protection across K Group, as well as ownership of the Cloudflare platform. You will have the opportunity to shape how security is implemented in application development across different teams. You will build common ways of working and help application teams and developers put them into practice.
The role combines technical expertise, consulting, development of operating practices, technology ownership and collaboration with a broad network of stakeholders.
We work in a hybrid model, combining office and remote work in a way that suits the role and the team. On office days, you will work at K-Kampus in Kalasatama, Helsinki, with excellent transport connections. The campus offers collaboration and break-out spaces, a gym, occupational health services, a café and a staff restaurant.
K Group employee benefits include a mobile phone benefit, Epassi, staff discounts at K Group stores, occupational health services and leisure-time accident insurance. You will also have access to a range of changing partner benefits covering areas such as sports, wellbeing, travel and accommodation, as well as opportunities to develop your expertise through internal training and online learning.
Interested?
Submit your CV and, if you wish, a free-form application by 20.11.2026.
We at K Group value diversity and believe that different backgrounds and perspectives are key to success. We strive to create a work environment where everyone has the opportunity to grow. Equality, non-discrimination, and fairness are our core principles in recruitment, compensation, and career development.
We do not require a specific educational background. Relevant experience and expertise are what matter most.
What do we offer?
You will take responsibility for application security and technical data protection across K Group, as well as ownership of the Cloudflare platform. You will have the opportunity to shape how security is implemented in application development across different teams. You will build common ways of working and help application teams and developers put them into practice.
The role combines technical expertise, consulting, development of operating practices, technology ownership and collaboration with a broad network of stakeholders.
We work in a hybrid model, combining office and remote work in a way that suits the role and the team. On office days, you will work at K-Kampus in Kalasatama, Helsinki, with excellent transport connections. The campus offers collaboration and break-out spaces, a gym, occupational health services, a café and a staff restaurant.
K Group employee benefits include a mobile phone benefit, Epassi, staff discounts at K Group stores, occupational health services and leisure-time accident insurance. You will also have access to a range of changing partner benefits covering areas such as sports, wellbeing, travel and accommodation, as well as opportunities to develop your expertise through internal training and online learning.
Interested?
Submit your CV and, if you wish, a free-form application by 20.11.2026.
We at K Group value diversity and believe that different backgrounds and perspectives are key to success. We strive to create a work environment where everyone has the opportunity to grow. Equality, non-discrimination, and fairness are our core principles in recruitment, compensation, and career development.
