Information Risk and Compliance Officer
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · DevOps · Systems Engineering
In short
Responsibilities
- Governance and continuous improvement of the ISMS within Production & Logistics
- Support and execution of IRAM assessments and related follow-up activities
- Contribution to information security governance, processes and coordination activities
- Preparation and maintenance of security-related documentation, reports and presentations
- Review, rewriting and improvement of shopfloor IT procedures and guidelines
- Collaboration with stakeholders across Production Units (PRUs), P&L IT (IN), Maintenance and Logistics
- Leading and coordinating the network of Local Information Security Officers (LISOs)
- Support to stakeholders in understanding and addressing information security and compliance requirements
- Assessment of the implications of the Cyber Resilience Act (CRA) for Production & Logistics
- Ensuring structured, consistent documentation and governance activities aligned with the ISMS
Requirements
- Experience within information security, cybersecurity support, risk management or compliance-related activities
- Experience of information security governance, risk and compliance work
- Experience of supporting or implementing structured security processes and ways of working
- Experience of conducting or supporting risk assessments and follow-up activities
- Experience of supporting governance processes, documentation activities or coordination of security-related work
- Relevant academic degree or equivalent professional experience within information security, cybersecurity, risk management, compliance or a related field
- Fluent Swedish and English, both spoken and written
- Strong ability to produce professional documentation and deliverables in English
- Strong documentation and analytical skills, with the ability to structure complex information clearly
- Ability to develop, review and improve security-related procedures, guidelines and documentation
- Ability to translate complex security and compliance requirements into clear, practical documentation
- Ability to coordinate activities across multiple stakeholders, functions and organisational areas
- Strong stakeholder management and communication skills, towards both technical and operational stakeholders
- Structured, proactive and solution-oriented, with a high focus on quality and accuracy
- Comfortable taking ownership and working across multiple parallel activities
Desired Qualifications
- ISO 27000 certification and/or practical experience of ISO 27001 frameworks
- Knowledge of the Cyber Resilience Act (CRA) and NIS2
- Experience of Cybersecurity Management Systems (CSMS)
- Experience from industrial, production or manufacturing environments
- Experience of IT/OT environments
Benefits
- Part of a consultant team that values people first
- Success is created through commitment, collaboration and development
- Flat organisation with short decision paths
- Strong sense of community
- Opportunity to influence your own development
Skills
We are consultants in Life Science and Management Whether customers or colleagues, our basic philosophy is always “people first”. We have extensive know-how and a solid background, alongside a powerful desire to drive change initiatives. We boost our customers’ competitiveness by always starting with business benefits. We put people first and know that all individuals have the potential to further develop and improve in their business operations. Our values: - People first - Quality and Value - Pride in our work Our services: - Consultants in Life Science and Management - Digital Platform for…
Company
WeQuelJob Posted
1 month ago
Expires
in 4 months
Employment Type
Full Time
Work mode
On Site
Hours per week
100
Experience Level
Mid-Senior
Locations
Södertälje, Sweden
Stockholm, Sweden
Eskilstuna, Sweden
Qualification
Applicants
Be an early applicant
