Vilma Blomberg Email & Phone Number

Hyvinkaa, Fi

Heading Operational Technology (OT) Security at Konecranes

Espoo, -, Fi

Team leader and line manager for KONEs Application Security team responsible for application security architecture, engineering and advisory on Secure Development Life Cycle (SDLC) in KONE's global Technology & Innovation unit (~2000 employees in 28 countries). In addition to AppSec, from 2023 took a sponsorship role and responsibility to define and initiate Global OT Security program for KONE production facilities in Europe, India and Northern America. Defined roadmap, conducted factory visits and established network for OT security improvements.My team's accomplishments & initiatives:- Established global AppSec team starting Oct 2021, recruiting and building a team from 3 members to 7 within less than a year, located in Finland and India.- Successful ISO27001 certification of KONE digital services with 0 major non-conformities. Documentation and guideline creation for security management system, security controls gap analysis, implementation support and progress tracking.- Initiated SecDevOps program incl. roadmap, setting & tracking OKRs, getting buy-in and collaboration, building awareness and security advisory model across software & equipment R&D engineering and product organizations. - Planned and initiated Enterprise IT Baseline Security program consisting of OKRs, 40+ baseline security improvement projects across IT units valued at +4,5m€ + established management tracking and advisory for teams.- Established visibility for product leaders to their solution's security risk, compliancy and vulnerabilities- Providing security advisory/consulting incl. threat modeling, risk assessments, integration of SCA, SAST, DAST to CI/CD pipelines and support with triage and fixing of vulnerabilities.- Running Bug Bounty program- Performing risk-based attack scenario testing against targeted digital products- Facilitation of Cybersecurity Guild network incl. planning and executing quarterly agenda, training and knowledge sharing for techies.

Espoo, -, Fi

In April 2021 I was given an additional role to lead a critical task force with a target to identify and implement immediate security fixes across full enterprise IT (all applications, network & infrastructure) as a response to a red teaming exercise. Followed up progress, coached, provided advisory and reported to CIO on weekly basis. Eventually prepared together with the task force a budget proposal for multi-year security improvement program and onboarded security program manager who took over this role during Autumn 2021. In October, I moved to my new role as Application Security Manager and team lead.

Espoo, -, Fi

Working as a technical product owner and designer in IAM, Cybersecurity. Leading agile technology teams and various projects with multiple stakeholders and suppliers. Overseeing the design, development, testing, deployment and delivery of complex, global IAM solutions (incl. IDM, PAM, SSO, MFA). Consulting application teams with a goal of improving the overall security of KONE.Accomplishments & Initiatives:- Lead successful migration and replacement of legacy IDM with modern IDM solution utilizing DevOps pipelines and automated testing.- Continuous design and development of IDM incl. integration to Salesforce, automated pipelines for creating new roles and groups, manual provisioning features along integration with ITSM, AD objects life cycle management, custom forms and workflows, upgrades, security fixes.- Lead global MFA rollout for field employees across the globe in 8 months.- Advised different applications in SSO integration setup and role/permissions/access design- Selection, POC and deployment of privileged access management (PAM) solution.- Responsible for design, development and roll-out of: PAM onboarding of server admin access from on-prem + cloud, automated onboarding/de-onboarding mechanism of newly deployed or decommissioned resources from AWS/Azure to PAM, enforced authentication with ephemeral certificates with RDP & SSH, designed & developed bypass access monitoring in cloud incl. SIEM alerts, scheduled and initiated bypass closing and old access cleanups from hosts.- Hardening of admin + domain service accounts and participation into the design of hardened AD tier model.- Participation to the investigation of security incidents from own expertise area - Responsible for leading and connecting project coordinators, change managers, architects, developers and engineers into accomplishments to above projects- Responsible for reporting, resourcing and stakeholder communication of above projects.

Espoo, -, Fi

Studying how to adopt DevOps practices and tools in KONE's Identity and Access Management area through my Master thesis work and conducting State of DevOps study in KONE Technology & Innovation unit. As a result of this design study and the implementation team's hard work we adopted agile process of design, development and managed to implement automated CI/CD pipeline incl. security and test automation for SailPoint IIQ in 3,5 months.The final research paper that I wrote was graded 5/5 by the University: "the study meets requirements of rigorous design science study, and its results could provide a good basis for a scientific conference paper".

Espoo, -, Fi

Developing my overall understanding of IAM and cybersecurity in a large multinational corporation. Worked as a deputy project manager in IdM implementation project kicking off the software testing and coordinating international testing teams across time zones.Some responsibilities:- Rolling out SSO and self-enabled password reset across the organization. - Managing the data cleaning and migration activities.- Project change/communications plan and holding of IAM Renewal information sessions to change managers and local service delivery managers around the globe.- Designed and documentation of IAM architecture togeher with Solution Owner.- Creation of advanced cyber security training materials on IAM and PAM.

Maternal leave

Helsinki, Fi

Worked as an assistant/analyst in a consulting company focusing in health care. Examples of my tasks:- Collected and analyzed data on access control, work time attendance and video surveillance systems in public healthcare organizations. Developed and prepared proposals for improving the solution management.- Conducted interviews with companies to find and profile potential health tech companies for investors. - Performed benchmarking research by collecting and analyzing cost data from healthcare sector in order to optimize and make processes lean.- Took care of daily administrative tasks and arranged events in NHG. Improved the administrative processes of the subsidiary company together with the business director.

Delivered services as an entrepreneur for two companies in - Digital marketing: social media marketing, creating advertising campaigns, buying digital advertising space, raising awareness and following up the analytics- Finances: administered account receivables of a company and was responsible over payment collection and negotiation with the customers

Summer job in social media marketing and building an online shop. During the summer I took an initiative to plan and launch a digital sales concept which gave visibility to the online shop and helped to sell bigger quantities to the wholesalers.

20240 Turku, Fi

Worked in the youth section of Turun Sanomat week-end publication producing news articles, interviews, polls, columns and blog posts.

Master Of Science - Ms, Information Management

Master Of Science - Ms, Information Systems Science

Master Of Science - Ms, Management & Information Technology

Bachelor Of Science - Bs, International Business & Information Systems Sciences