Service Owner, Information Security

Whatever is built in this world should be something we can trust, now and always. For us, each dream of a new home, every customer’s success and every solution the size of a city begins with people. A job well done is all about smart, shared choices that are brought to life with our finest work and expertise. This is how we do more than just build well. We build lasting value and joy of achievement. Tomorrow well built is made together.

As a Service Owner, Information Security at YIT, you will play a key role in ensuring that our IT security services support business needs, compliance requirements, and secure operations across the enterprise. Working closely with IT teams, business stakeholders, and external security partners, you will own and develop key security services, including identity and access management, cyber security operations, and vulnerability management.

You will report to the Director, Common IT Services, and work in close partnership with our Chief Information Security Officer (CISO). While the CISO defines security strategy and policies, you will be responsible for the services that bring them into practice, ensuring they are secure, reliable, and aligned with business needs.

This is a succession role: you will start in early 2027 and work alongside our experienced current service owner during the first half of the year before taking full ownership. The role is based in Finland. In this role you will be working with projects that require security clearance and background checks.

What you'll do

• Own YIT's IT security services end to end, including the service roadmap, the service catalogue, the budget and service performance.
• Lead and steer our security partners (managed SOC/SIEM, network security operations and a global delivery team), including contracts, SLAs and continuous improvement.
• Manage security in customer projects with national security requirements, making sure our solutions meet the requirements set by customers and authorities.
• Lead the incident response process, including coordinating with relevant stakeholders during security incidents, including privacy related incident management
• Monitor and improve YIT's overall security posture, and report security metrics and KPIs to senior management in language the business understands.
• Make security part of how IT and business projects are delivered, from architecture to hand-over, and lead our practical compliance work based on relevant regulation such as GDPR.
• Manage YIT's public DNS, domains and certificates together with the business.
• Develop our security stack and the processes, documentation and standards around it. Our current security service delivery is built on Microsoft-based security stack (Entra ID, Defender, Purview and Sentinel).

What helps you to succeed in this role

• At least five years in IT security, including experience of owning a security service or leading security delivery.
• Proven experience of managing external service providers and service budgets: contracts, SLAs, performance and costs.
• Hands-on understanding of cloud-native security technologies, including identity management, endpoint security, data protection, threat detection, and SIEM/SOC operations.
• Participate in projects that have special high security clearance requirements
• Solid experience in risk management and security incident response in a live production environment.
• Working knowledge of the regulation that applies to us.
• The ability to explain security clearly to people who are not security specialists, and fluent Finnish and English.
• A degree in computer science, information technology or a related field, or equivalent experience gained in practice.
• Experience with Finnish national security requirements (for example Katakri) and with handling classified information.
• Certifications such as CISSP, CISM or ITIL 4, and familiarity with frameworks such as ISO 27001 or NIST CSF.
• Experience of supplier, third-party and supply chain security in an environment with many subcontractors.
• Experience of working in a multi-country organization and with distributed teams.
• Security experience with operational technology, industrial systems or construction-site technology.

You do not need to tick every box. If you recognize yourself in most of what we expect, we would like to hear from you.

How you make an impact at YIT

• You understand customer needs and connect your daily work, decisions and solutions to creating customer value.
• You take ownership of your area of responsibility, deliver high-quality results and ensure execution of your own and colleagues’ work.
• You proactively improve your area of responsibility and ways of working. You learn from experience, share your expertise openly, and apply what you learn to improve both your own and the team’s performance.
• You work openly with others and help to create an environment where people feel valued. You build trust, collaboration and psychological safety so that people around you can succeed together.

What we offer

We want you to thrive in your work and grow as a professional. At YIT, you can expect:

• A service owner role with a real mandate. You own the roadmap, the budget and the partner relationships for your services; this is not a co-ordination seat.
• A structured handover of about six months with an experienced predecessor, so you can take over the services and projects with confidence.
• A modern technology security stack, and colleagues in cloud, network and workplace services who build with you rather than after you.
• Opportunities for continuous learning and to build your own career path. We support your development at different stages of your career.
• Diverse and meaningful work where you can see the impact of what you do.
• Excellent leadership where you are supported towards clear shared goals and ways of working, coached to shine, and encouraged to take responsibility.
• Flexible ways of working that support your everyday life. You combine office and remote work working typically at the office around three days a week.
• Support for your well-being through occupational health support and benefits such as lunch and sports, culture, and well-being benefits, helping you succeed in your work over the long term.

Your team

You will join Common IT Services, an international team of four service owners and three country coordinators responsible for YIT's digital productivity, cloud and IT infrastructure, IT security, and network and site services. The team is part of YIT Technologies, which also covers business solutions, data and architecture, process development, IT investments and support, and security, risk and continuity management. You will work closely with your teammates, our CISO, colleagues across YIT, and our technology and service delivery partners, in an open and collaborative environment.

We want to ensure that you succeed in your role from the very beginning with help of clear expectations, open communication, and a structured onboarding process. Your manager supports you in your day-to-day work from the start, and regular discussions help you succeed also in future.

Tomorrow well built is made together, apply now

Please submit your application by 8 November 2026. We review applications and conduct interviews during the application period, and we may fill the role before the deadline, so it is worth applying early.

For questions about the role, contact Jukka Vänttinen, Director, Common IT Services, at jukka.vanttinen@yit.fi or by phone +358401625644, Monday to Thursday, from 16:00 to 18:00 (EEST)

YIT builds thriving living environments in Europe. For more than 110 years, we have made everyday life smoother by building homes for a good life, spaces where people and businesses can thrive, and infrastructure that supports the essential functions of society. We operate in seven countries and employ approximately 4,100 professionals. In 2025, our revenue was EUR 1.8 billion. YIT Corporation’s shares are listed on Nasdaq Helsinki.