About the role

We are looking for an Information Security Specialist to provide reliable and professional support to our Information Security Manager across all atNorth locations. This role plays a key part in ensuring atNorth’s compliance with applicable regulations, security standards, and customer requirements related to information security and business continuity.

Working closely with the Information Security Manager and internal stakeholders, you will help protect the organization against evolving security threats and vulnerabilities, while contributing to the continuous improvement of atNorth’s information security governance and business continuity capabilities.

Key responsibilities

Standards & Compliance

• Support compliance with ISO 27001:2022, including monitoring, reporting, documentation, and ongoing ISMS maintenance

• Support Business Continuity Management (BCM) in line with applicable standards (e.g. ISO 22301), including documentation, monitoring, and testing

• Support internal and external information security audits and assessments

• Conduct gap assessments and contribute to remediation planning

• Support regulatory compliance related to NIS2, DORA, GDPR, and CRA

Reporting & Documentation

• Develop and maintain information security policies, processes, procedures, and guidelines

• Prepare and present information security and business continuity reports to stakeholders

Incident & Risk Management

• Support incident management processes, including investigations, analysis, and post-incident reporting

• Support identification, assessment, tracking, and mitigation of information security and business continuity risks

• Monitor vulnerabilities and contribute to the implementation of effective controls

Testing & Exercising

• Conduct and support regular security and continuity drills, including system security testing, business continuity plans, and emergency response exercises in collaboration with IT

Training & Awareness

• Support the development and delivery of information security and business continuity training for employees and third parties

• Ensure training obligations are met and reporting on participation and progress is maintained

• Contribute to strengthening a company-wide culture of information security awareness

About you

You have strong skills in MS 365 and Atlassian tools and proven experience in information security governance within complex environments. You are comfortable working hands-on with ISO 27001:2022 and ISMS implementation, and you have experience with Business Continuity Management Systems, preferably aligned with ISO 22301. You have supported internal and external audits and compliance assessments and have a good understanding of relevant EU regulations such as NIS2, DORA, CRA, and GDPR. You are confident in producing clear, high-quality reporting and documentation, and you bring a solid understanding of information security, cybersecurity, and continuity-related threats. You have experience managing risk registers, conducting risk assessments, and supporting mitigation planning (knowledge of ISO 31000 is a plus). In addition, you have supported security tests, exercises, and continuity drills and have experience creating and delivering information security awareness training materials and presentations.

Preferred qualifications

• 5+ years of experience in administrative information security and ISO 27001 environments

• Understanding of additional frameworks and standards such as SOC 2 (ISAE 3000), PCI-DSS, Katakri, or NIST

• Degree in security management or a related field

• Relevant professional certifications (e.g. IRCA/CQI, ISACA, ISC2, CompTIA, Microsoft)

• Experience in high-security environments, preferably data centers

• Competence in cybersecurity management and IT security solutions

• Fluency in English (written and verbal), with the ability to present confidently; additional Nordic language is considered a plus

At atNorth, we believe that sustainable success starts with the wellbeing of our people. Our commitment to building an open, transparent, and inclusive culture is not just a priority—it is a core part of how we lead, grow, and deliver excellence.

Through regular one-to-one engagements and monthly wellbeing surveys, we listen carefully to our teams, ensuring that every voice is heard and every opportunity for improvement is embraced. We recognize that innovation and collaboration thrive where people feel truly connected, which is why we come together each week to share ideas, strengthen relationships, and nurture a sense of belonging—sometimes over a simple breakfast and good conversation.

At atNorth, we are building more than infrastructure. We are building a community where people can do their best work and shape the future together.