> Markdown version of [/jobs/ext/2717627-manager-information-security-compliance](https://www.wearedevelopers.com/jobs/ext/2717627-manager-information-security-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager - Information Security (Compliance) - **Company:** Basware - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing, Cyber Security, PCI Data Security Standards, Information Security Management System, ISO/IEC 27002 - **Published:** September 4, 2026 - **Apply:** https://cdn.jobylon.com/jobs/380365-basware-manager-information-security-compliance/ ## About the Role Experience and technical knowledge * Minimum of two years' experience working in information security or security compliance. * Strong knowledge of recognised information security control frameworks and assurance standards, such as ISO/IEC 27002, PCI DSS, the NIST Cybersecurity Framework and ISAE standards. * Practical experience of information security risk management, including risk identification, assessment, treatment, monitoring and reporting. * Experience supporting internal or external audits, evidence collection, control testing and remediation tracking. Communication and stakeholder engagement * Strong written and verbal communication skills, with the ability to explain security and compliance requirements clearly to technical and non-technical audiences. * Strong influencing and stakeholder management skills, with the confidence to provide constructive challenge and secure commitment to agreed actions. Planning, organisation and working style * Effective project management and organisational skills, with the ability to manage competing priorities, actions and stakeholders. * A structured, detail-focused and improvement-oriented approach, with sound judgement and the ability to work both independently and collaboratively. Professional qualifications * Relevant professional certification or training in information security, audit, risk or compliance is desirable. * Experience with AI tools, frameworks or applications is considered a strong asset. We highly value candidates who demonstrate curiosity, a proactive mindset and a willingness to explore and incorporate AI-driven technologies into their work. We encourage growth in this area and provide opportunities for experimentation and learning. ## Description We are seeking a Manager - Information Security (Compliance), an experienced security compliance specialist who thrives at the intersection of governance, risk management, and stakeholder engagement. In this role, you will help ensure that Basware maintains a robust and effective security compliance program while supporting customers, auditors, suppliers, and internal teams with practical, risk-based guidance. The Information Security Compliance team supports the organisation in maintaining an effective, risk-based information security management system. The Manager - Information Security (Compliance) will coordinate key compliance, assurance and risk management activities, working closely with business and solution owners to strengthen security governance, support audit readiness and drive continual improvement. Customer and stakeholder assurance * Manage the Security Advisory process, including completion of due diligence questionnaires, requests for information and general information security queries from customers, prospects, partners and customer-facing colleagues. * Provide practical information security and compliance advice to colleagues, projects, solution owners and business stakeholders, escalating material risks where appropriate. Risk, supplier assurance and business continuity * Conduct and support third-party information security risk assessments and periodic supplier reviews, documenting findings, risks, recommendations and follow-up actions. * Maintain the information security risk register, coordinate periodic risk reviews, monitor treatment actions and support the CISO and risk owners in recording clear, proportionate and current risk information. * Support business continuity activities, including assisting business owners with the completion and review of Business Impact Analyses and tracking related actions. Audit and corrective action management * Plan, coordinate and perform internal information security audits, record audit evidence and findings, and monitor agreed corrective actions and opportunities for improvement. * Support external audits and assurance activities by coordinating evidence, engaging relevant control owners and responding to auditor queries. * Agree appropriate corrective actions and implementation dates with control owners, and proactively support delivery to ensure agreed timelines are achieved. Compliance initiatives and awareness * Develop appropriate security training and communications that promote a positive information security culture. * Manage assigned compliance initiatives and improvement activities, maintaining clear plans, priorities, dependencies and stakeholder communications. Work with great people Hanna Ikonen VP, Customer Success "I feel that I can make a difference, drive improvements & take controlled risks, and all this is supported by the company." Kevin Kamau Senior Product Manager "Basware is a global company that values people as a crucial driver for success." Mika Peurala Principal Solution Architect "Absolutely the best colleagues and line managers in the world!" Jaakko Jutila VP, Customer Support "At Basware you have the freedom to identify and start different development activities across the organization without getting approvals from above." Namrata Checker Team Lead, Digital Transformation and Excellence "What I love most about my job is the people that I work with, the freedom of putting forward my ideas, thoughts and feedback but also the freedom of creating the way of working that works best for me." Siddhartha Bhatia Senior Cloud Developer "I am honored to have worked with the leaders of tomorrow. The organization is absolutely people centric with its prime focus always on employee engagement, loyalty and satisfaction." ## Related Videos - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Rethinking Recruiting: What you didn’t know about Responsible AI](https://www.wearedevelopers.com/videos/1090-rethinking-recruiting-what-you-didn-t-know-about-responsible-ai) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)