Tomi Marttinen

I am an executive with over 25 years of experience at the intersection of IT governance, cybersecurity, and digital transformation - across finance, critical infrastructure, telecom, and the public sector. As a former President of the Finnish Information Security Association and current Vice President of ISACA Finland, I have held influential positions in national cybersecurity leadership and contributed to industry policy and regulatory readiness (e.g., GDPR, DORA, EBA Guidelines).
My value to boards and executive teams lies in my ability to balance strategic vision with hands-on, risk-informed execution. I have built and scaled advisory practices, served in interim CISO and DPO roles, and directly advised supervisory authorities. My leadership experience spans high-growth and heavily regulated environments, including pan-Nordic responsibilities within a leading GRC advisory firm.
Companies operating in complex regulatory environments - or those undergoing digital transformation requiring resilience, compliance, or secure growth - benefit most from my expertise. I work best with firms that need clarity, pragmatism, and trusted governance in the face of uncertainty or change. Whether on advisory boards or company boards, I bridge the gap between business, IT, and security leadership with a clear-eyed focus on long-term value.