Tuomas Tiensuu Email & Phone Number

Helsinki, Fi

Helsinki, Uusimaa, Finland

I am responsible for overseeing information security, physical security, risk management, and continuity planning.I develop and implement security strategies to protect information systems from cyber threats, manage security technologies, conduct regular assessments, and ensure compliance with industry standards and regulations, including ISO 27001. I ensure the confidentiality, integrity, and availability of our data. This involves continuous monitoring of security threats, incident response management, and maintaining up-to-date security measures to counteract emerging threats. I lead risk management initiatives by identifying potential risks, evaluating their impact, and developing mitigation strategies. I conduct risk assessments and implement risk management frameworks. For continuity planning, I develop and test disaster recovery plans to ensure business operations continue seamlessly during disruptions, coordinating with stakeholders to ensure critical systems are resilient.I ensure our security practices comply with laws, regulations, and industry standards. This involves conducting regular audits, developing policies, and providing training to promote security awareness. Furthermore, I ensure compliance with DORA (Digital Operational Resilience Act) and NIS2 (Network and Information Security Directive), implementing Information Security Management Systems (ISMS) to align with regulatory requirements.

I am responsible for ensuring the confidentiality, integrity, and availability of our information assets, as well as the security of our cloud-based applications. I lead efforts to develop and implement security policies, processes, and guidelines to ensure compliance with industry standards and regulatory requirements.My role includes a heavy focus on application security, where I work with development teams to ensure that security requirements are integrated into the software development lifecycle. I oversee DevSecOps practices to ensure that security is built into our applications from the earliest stages of development, and that security testing and scanning are automated and integrated into our CI/CD pipelines. In my role related to Information Security Management Systems (ISMS), I orchestrate the development and maintenance of robust frameworks that safeguard sensitive data and critical assets. This involves crafting comprehensive policies, conducting risk assessments, and implementing stringent controls to mitigate potential vulnerabilities. Additionally, I continuously monitor and refine ISMS protocols to ensure compliance with industry standards and regulatory requirements, fostering a secure and resilient environment against evolving cyber threats.Most importantly, we are maintaining the trust of our customers, and demonstrating our commitment to security excellence in the rapidly evolving world of cloud-based software.

In my role at KONE, I play a pivotal role in steering the Secure Software Development Lifecycle (SSDL) initiatives across our solution development projects. I take pride in supporting and guiding global development teams to implement comprehensive security practices that align with industry best standards. My responsibilities encompass the meticulous identification and implementation of stringent security requirements throughout the software development process.One of my primary tasks involves overseeing the thorough review and testing of solutions as they are being implemented, ensuring they meet robust security benchmarks. Collaborating closely with cross-functional teams, I advocate for a security-by-design approach, embedding essential security protocols at every phase of the development cycle. This proactive strategy not only fortifies individual projects but also cultivates a culture of security consciousness among diverse teams.Moreover, I lead the design and management of our application security toolchain. This involves curating and optimizing a suite of cutting-edge tools aimed at fortifying our development environment. My efforts in enhancing security testing automation empower development teams to bolster their capabilities effectively, ensuring compliance with industry standards and regulatory requirements.By driving these initiatives, I aim not just to fortify our solutions against modern cyber threats but also to cultivate an environment where security is a fundamental aspect of our development ethos. This approach safeguards our solutions' integrity and resilience, maintaining our commitment to delivering secure, high-quality products.Some tools & technologies used in this role:Coverity, Black Duck, CodeDx, GitLab, IriusRisk, QualysWAS, Jira

Helsinki Area, Finland

I work here as an entrepreneur and information security professional. Some of the key areas includes:-Security governance-Risk management-Security architecture and design-Information security management-Information security consulting

Helsinki Area, Finland

Within the realm of security testing and secure web development, I've championed a diverse range of responsibilities integral to ensuring fortified software ecosystems. My expertise spans various domains, encompassing secure software development practices, automated and manual security testing, and meticulous threat modeling to identify and neutralize potential vulnerabilities.A core aspect of my role has involved the strategic management and monitoring of application security requirements. This entails a comprehensive oversight of the development lifecycle to embed security considerations from inception to deployment. Moreover, I've directed efforts towards supervising penetration testing and audits, ensuring adherence to stringent security benchmarks and compliance with industry standards.Additionally, I have been instrumental in crafting and delivering comprehensive application security training programs. These initiatives aim to cultivate a culture of security awareness among development teams, empowering them with the knowledge and skills to proactively tackle security challenges.My expertise involves enhancing CI/CD security via automated testing frameworks, ensuring development pipelines are fortified with strong security measures.In essence, my role has been multifaceted, encapsulating various facets of the Secure Software Development Lifecycle (SSDL). By prioritizing application security training, threat modeling, stringent application security requirements management, CI/CD security integration, and comprehensive security audits, I've endeavored to fortify software ecosystems and foster a culture of proactive security measures within dynamic development environments.Some tools & technologies used in this role: BurpSuite, WhiteSource, GitLab, Jenkins, Tenable.io, Jira, Confluence, Bitbucket, Bandit, Retire.js,OWASP Dependency Track, Zed Attack Proxy, Secure Code Warrior

Helsinki

At Silverskin, a pioneering Cyber Attack Company committed to unraveling the intricacies of cyber threats, I played a pivotal role in contributing to over 100 diverse projects focused on fortifying application security and conducting comprehensive penetration testing.Throughout my tenure, I held a multifaceted role that involved spearheading various critical tasks. This encompassed providing cybersecurity consultations, delving deep into the realms of penetration testing for both web and mobile applications, and constructing threat models to preemptively identify and address potential vulnerabilities. Additionally, I conducted evaluations to ensure the fortified security of architectural designs, emphasizing a proactive approach to risk mitigation.Operating within this environment, I honed my skills by leveraging an arsenal of tools and state-of-the-art technologies. This included adept usage of Kali Linux, Burp Suite, Nessus, Nexpose, Zed Attack Proxy, SQLMap, Bandit, Safety, Nmap, and Metasploit, allowing for a comprehensive approach to securing systems and applications.My tenure at Silverskin not only expanded my technical expertise but also ingrained a deep understanding of the ever-evolving landscape of cyber threats. It afforded me the opportunity to develop holistic strategies aimed at fortifying cyber defenses and pre-empting potential breaches.

Oulu

Coop for games.Spawn Point is a game development oriented cooperative founded in Oulu during the latter part of 2014.Our mission and purpose is to support and develop the game development industry in the Oulu region, Northern Ostrobothnia and the whole of Finland. Our primary objectives are to improve and uphold the skills and talent of individual game developers and to generate new jobs for the game development industry.At the moment our cooperative consists of 20 members who all have strong backgrounds in game development. We are extremely excited and interested in working with game development companies of all sizes.www.spawnpoint.fi

Oulu Game Lab is a pre-incubator for game start-ups. I worked here as a junior game developer.

Helsinki

Active Directory management, Windows Servers, Operating System rollouts, software installations and maintaining, remote mobile services

Oulu

Family business.Software and hardware installations, remote mobile services, IT consulting and saleswww.tty.fi

Helsinki

Master Of Business Administration - Mba, Computer/Information Technology Administration And Management

Master Of Engineering - Meng, Engineering

The objective of the education is to produce modern high-level competences in the area of cybersecurity. My Thesis work deals.

Engineer'S Degree, Computer Games And Programming Skills

Activities and Societies: Cambridge Venture Camp 2014, Nordea Innovation Prize 2014, Touch Your Future 2015, Startup Summer Camp.

Computer Science And Marketing