Chief Information Security Officer (CISO)

Admicom is a SaaS provider that digitalizes the construction and building industry ecosystem, leveraging the global megatrend of construction technology. Founded in Finland, Admicom is listed on the First North Helsinki stock exchange.

As we continue to grow and scale our operations, we are strengthening our information security and risk management capabilities. To support this, we are now looking for a Chief Information Security Officer (CISO) to build and lead Admicom’s security, risk, and compliance practices.

CISO

As CISO, you will define and lead Admicom’s information security strategy, ensuring our systems, data, products, and operations remain secure, compliant, and resilient as we scale. You will play a key role in embedding security into our ways of working across internal operations, employee technology, corporate systems, and our SaaS products and environments.

In this role, you will report to CTO Thomas Raehalme and work closely with leadership, product, engineering, and internal IT teams. You will shape and develop Admicom’s security function and ways of working. The role combines strategic leadership with hands-on execution.

What makes this role different

This role starts with building the foundations of Admicom’s security function and leading our ISO 27001 journey.

Our long-term ambition, however, is not to build a compliance-heavy security organization. We want security to become a natural part of how products are designed, built, and operated.

We're looking for a builder who can establish the foundations and then help shape what modern, AI-native security looks like in a SaaS company.

We are not looking to build a large security organization. We are looking for someone who can create significant impact through strong judgment, modern tooling, automation, and close collaboration with product and engineering teams.

What you’ll do

As CISO, you will lead the development of Admicom's security capabilities across governance, technology, product development, and operations, combining strategic leadership with hands-on execution.

In this role, you will:

• Lead Admicom’s ISO 27001 certification and ISMS development

• Establish security governance, risk management, and security policies

• Embed security into our software development lifecycle and engineering practices

• Develop our product security, cloud security, and DevSecOps capabilities

• Strengthen incident response and security operations

• Partner with Product and Engineering teams on secure-by-design development

• Introduce AI, automation, and agent-based approaches to security work

• Help balance security, risk, and business objectives

What will help you succeed in this role

You'll likely succeed in this role if you bring experience in several of the following areas:

• Experience leading security, cybersecurity, or risk management initiatives

• Experience with ISO 27001 and ISMS frameworks

• Understanding of SaaS, cloud, and product security

• Ability to work closely with engineering teams and influence software development practices

• Experience balancing risk, compliance, and business needs

• Strong communication and stakeholder management skills

• Interest in AI, automation, and modern security tooling

You may currently be a CISO, Product Security Lead, Security Architect, or Senior Security Consultant looking to take ownership of long-term outcomes.

Why join Admicom?

At Admicom, you will step into a key role shaping the company’s information security and risk management capabilities at a pivotal stage of growth. As we scale our SaaS business and expand internationally, security plays a critical role in enabling sustainable growth, building customer trust, and meeting evolving regulatory expectations.

You will have a unique opportunity to build and evolve Admicom’s security function and influence how security is embedded into both our internal operations and customer-facing SaaS products. You will work closely with leadership and engineering teams in a role that has a direct impact on how we build and operate our technology. As a SaaS company, trust, security, and reliability are at the core of everything we do.

Our culture is built around our values We dare, we care, and we grow. We encourage people to take initiative and make bold decisions, support each other in reaching shared goals, and continuously develop both our ways of working and our people. At Admicom, we work in an environment built on trust, flexibility, and autonomy, where collaboration and continuous development are part of how we operate.

We offer a hybrid working model and a primary work location in Helsinki or Jyväskylä.

Interested?

We'd love to hear from you. Please get in touch by 16 August 2026 and tell us what excites you about this opportunity and why you'd be a great addition to our product organization.

As our recruitment team will be enjoying their summer holidays, we'll take a short break from the recruitment process. We'll return to candidate conversations in mid-August, when we'll begin reaching out to candidates and arranging meetings.