Open to opportunities

Alex FI

@alexfi

Security engineering and operations director leading global teams and cyber transformation across hybrid cloud environments.

Finland

Message

In my current global role as Director, Security Engineering and Operations, I lead a distributed security function spanning cyber engineering, data security, SOC, and incident response. I’m directing transformation work including secure software development, DLP, and DevSecOps practices across Azure and on-premises environments.

At Nordic Investment Bank, I held a dual mandate as Head of IT Governance & Change and Head of IT Security. I sponsored an integrated GRC platform, initiated Azure migration, and established enterprise change management, while closing 43 high-risk audit items in six months.

At Nordea Bank, I led global information security and security operations for banking services. I sustained 99.99% availability across critical services and delivered cost reductions through strategic insourcing and service optimisation.

Across banking, aviation, industrial technology, and consulting, I’ve advised executives and boards on technology risk, security strategy, and compliance. My work has included global SOC rollouts, cloud migrations, and resilience programmes aligned with frameworks including SWIFT CSF, ISO 27001, PCI-DSS, and GDPR.

Experience

Work history, roles, and key accomplishments

Current

Director, Security Engineering and Operations (Global)

Current

Confidential

Sep 2024 - Present (2 years 1 month)

Leading a globally distributed security function spanning cyber engineering, data security, SOC, and incident response. Defined a clear path for IT security strategy, set roadmap, budget governance, and organisational capability.

Azure SOC Incident Response DevSecOps CI CD Vulnerability Management Agile Microsoft Security Ecosystem Sentinel Entra ID Microsoft Defender Purview Sailpoint Palo Alto Veeam Jira Service Management INexus

Head of IT Governance & Change | Head of IT Security

Nordic Investment Bank (NIB)

Jan 2021 - Sep 2024 (3 years 8 months)

Dual mandate covering IT security architecture, engineering and operations, and enterprise IT governance — including change management, project governance, and GRC — in a hybrid (on-premises / Azure) environment regulated under SWIFT CSF and ISO 27001. Chaired the cybersecurity committee and served as principal board and executive advisor on IT security risk, IT debt, and technology strategy.

Azure SWIFT CSCF ISO 27001 GRC Change Management Project Governance BCM DRP Jira Service Management Plan View CMDB SLA Ola

Senior Manager, IT Security and Risk Management

Qatar Airways

Feb 2020 - Dec 2020 (10 months)

IT leadership team member responsible for information security governance, risk management, and regulatory compliance for a major international airline conglomerate. Led cloud transition strategy and managed group-wide InfoSec compliance across ISO 27001, Qatar National Cybersecurity Framework, and PCI-DSS.

ISO 27001 PCI DSS Cloud Security ISMS Risk Management Compliance

Senior Operational Risk Officer

Nordea Bank

Dec 2018 - Jan 2020 (1 year 1 month)

Second-line authority for IT and security risk oversight across a systemically important financial institution, with veto rights over non-compliant technology initiatives and exemption approvals. Advised board and executive leadership on technology risk, digital strategy, architecture decisions, and regulatory alignment (ECB, BCBS 239/RDARR).

Risk Management IT Security GDPR Data Privacy PIA T24 Three Lines Of Defense Models

Head of Information Security (CISO) / Department Head

Andritz AG

Aug 2017 - Sep 2018 (1 year 1 month)

Global CISO and department head for a multinational industrial technology company. Led security architecture, engineering, and operations across EU, US, and APAC regions. Chaired the global security committee and built and directed SOC, DLP, and IAM functions.

CISO SOC DLP IAM Threat Intelligence Vulnerability Management Cloud Migration SLA MSSP

Director, Information Security

Nordea Bank

May 2015 - Aug 2017 (2 years 3 months)

Unit head directing global information security for retail and commercial banking divisions. Principal advisor to executive management on business-aligned IT and security strategy. Ensured security and regulatory compliance (ISO 27001, SWIFT CSF, ECB) across global operations.

ISO 27001 SWIFT CSCF GDPR Privacy By Design Bias PIA Enterprise Architecture Vendor Management

Head of Network and Security Operations

Nordea Bank

May 2013 - May 2015 (2 years)

Unit head responsible for 24/7 global security operations, maintaining critical infrastructure availability and resilience. Sustained 99.99% infrastructure uptime and a zero major/medium incident record across the tenure.

Security Operations Network Security Incident Management Cost Optimization Insourcing

Head of Encryption and Key Management Services

Nordea Bank

May 2012 - Apr 2013 (11 months)

Unit head for 24/7 global encryption and key management services supporting customer-facing platforms (NetBank, mobile banking) and internal systems. Maintained 99.99% service availability and zero incident record across all managed platforms.

Encryption Key Management Availability Cost Optimization Vendor Management

Manager, IT Risk and Assurance

Ernst & Young (EY)

Oct 2011 - Apr 2012 (6 months)

Secured 17 multi-year client engagements with C-suite executives, delivering business-aligned IT and cybersecurity strategy, IAM, DLP, and business continuity programmes. Restructured advisory delivery practice using COBIT and TOGAF frameworks.

IT Risk Assurance IAM DLP Business Continuity COBIT TOGAF ISO 27001