Job Description

Are you interested in taking ownership of security compliance and secure development practices in a globally used software platform? Join Vibrantz Technologies and help build secure, compliant, and scalable ways of developing InnovatintⓇ.

Vibrantz Technologies is a global provider of specialty chemicals and materials solutions, serving over 11,000 customers worldwide. With operations across six continents and approximately 4,500 employees, Vibrantz combines deep expertise in materials, color technology, and industrial applications to support a wide range of industries.

Innovatint is Vibrantz’s digital platform for managing tinting systems used by paint manufacturers and retailers worldwide. The platform supports the full tinting workflow, from color matching and quality control to in-store operations, and plays a critical role in customers’ daily production and sales processes. As Innovatint continues to grow, we are strengthening its security, DevSecOps practices, and regulatory compliance to support both internal teams and customer-managed environments.

What will you be doing?

In this role, you will take ownership of security compliance and secure development practices for the Innovatint platform. Your primary focus is ensuring that Innovatint meets regulatory requirements such as the Cyber Resilience Act (CRA) and ISO 27001, while embedding security into everyday development. This includes documentation, process development, audits, and ensuring that compliance requirements are continuously met as the product evolves.

Compliance work is approached pragmatically and as an enabler for development, not as a standalone documentation exercise. After the initial implementation phase, you will continue to own and maintain security-related processes. You will also contribute to improving security in development through areas such as CI/CD pipelines and related tooling.

You will work closely with an experienced development team and contribute to technical decision-making from a security perspective, with shared ownership of security-related topics. Hands-on coding is not the core of the role, but the ability to read, understand, and contribute to code is important. Over time, the role can evolve to include more development work, depending on your interests.

Your responsibilities include:

• Owning and maintaining security compliance practices, including documentation, policies, and audit readiness
• Defining and improving secure development lifecycle practices
• Reviewing and understanding application code from a security perspective
• Developing and improving security tooling and development workflows
• Advising customers on secure private cloud and server-based setups
• Participating in architecture discussions with a focus on security and maintainability

What kind of person thrives in this role?

You are an engineer with a strong interest in security compliance who understands how software is built and how regulatory requirements translate into everyday development. You take ownership of security topics end to end, work closely with developers, and make pragmatic decisions that balance risk, usability, and development speed. You are comfortable working with documentation, policies, and audit requirements as a natural part of your daily work and you communicate clearly with both technical colleagues and customers.

Required qualifications:

• Proven experience working with ISO 27001 and/or regulatory frameworks such as CRA
• Experience participating in or owning compliance processes, audits, or certifications
• Understanding of how compliance requirements translate into development practices
• Ability to read, understand, and reason about code; experience in at least one programming language
• Understanding of secure system administration principles in Windows environment
• Experience working in environments where security, reliability, and compliance matter
• Full professional proficiency in English

We consider as an asset:

• Experience working with security scans in CI/CD pipelines
• Programming experience with Python, TypeScript/React, SQL
• Experience advising customers or stakeholders in a technical expert role
• Familiarity with GitHub environment
• Finnish language skills

We can offer you:

• A meaningful role working on a globally deployed software platform with tens of thousands of installations
• A calm, focused working environment where you can concentrate on doing things properly
• Real influence over how DevSecOps and security practices are built and evolved
• Freedom to shape the future direction of your role after the compliance implementation phase
• A small, experienced, and supportive team that values knowledge sharing and trust
• Flexible working hours and a hybrid work model
• Comprehensive benefits including ePassi, extensive occupational healthcare, phone benefit, and all necessary work equipment provided

Practicalities:

This is a full-time and permanent position and you will be employed directly at Vibrantz Technologies. Start time in the role is as soon as possible. The role is located in Tikkurila, and we expect regular onsite collaboration as part of the hybrid model, especially during the onboarding phase. The base salary in this position is approximately 4000-5000 €/month depending on the level of your experience.

Sounds like you? Please submit your CV and motivation letter in PDF-format in English latest by the 9th of April via our application system. A motivation letter is optional, but with a role-specific motivation letter you can provide more information about your relevant skills and why this would be an interesting opportunity for you.

Please note that we are actively reviewing applications throughout the application period and processing them in the order they are received. Remember to use the application system, we do not accept applications by email. We want to ensure that all applicants can participate in the process equally, and we will take individual accessibility needs into account where necessary.

You can familiarize yourself with Vibrantz Technologies here: https://vibrantz.com/ and https://innovatint.com/. For more information about the recruitment process contact aTalent’s Recruitment Consultant Veera Kokko (+358 447835666, veera.kokko[at]atalent.fi). If I’m unable to answer your call right away, please leave a text message and I’ll get back to you as soon as possible.