Information Security Officer

About the Position

Shape and elevate the information security framework of a modern tech bank - combining strategic influence with hands-on impact.

Northmill Bank is a challenger bank at the intersection of technology and finance, committed to revolutionizing the way people manage and protect their financial well-being. We are creating a different kind of banking experience, digital yet personal.

Northmill Bank was founded in 2006 and have grown to over 240 employees in 3 countries and over 270,000 customers. We use the latest technology to develop safe, smart, and user-friendly products for our customers. They are the sole reason why we do what we do. We are a 100% cloud-based product company where technology is the driver to create smarter banking products.

Grab this opportunity to be a part of us and our journey!

Responsibilities

• Translating information security requirements into practical, effective, and business-aligned policies, procedures, guidelines, or strategies.
• Monitor compliance for our internal information security rules and our applicable business and regulatory requirements. DORA, GDPR, PSD2, FFFS, Visa, Swift, Swish, Bankgirot, Rixbanken, etc.
• Structure information security requirements in the ISMS in alignment with the ISO 27001 standard.
• Act as an advisor and lead for information, cyber security, or privacy incidents.
• Serve as a subject matter expert within privacy and data protection.
• Act as subject matter expert in relation to our PCI-DSS certification and conduct readiness assessments towards the business. Keep track of recurring tasks as needed.
• Contribute to reporting towards supervisory authorities (e.g. SFSA, IMY, FIN-FSA).
• Ensure that the organization has relevant security awareness and training in place.
• Lead and participate in Business Impact Analysis, ICT vendor approval, the Register of Information, Critical and Important functions, ICT Risk assessments, Data Protection Impact Assessments, IA-act risk assessments, NPAP, and various GAP analyses.

Requirements

• Experience working as an Information Security Officer or in a similar role.
• Hands-on experience in developing policies, procedures, and security frameworks.
• A pragmatic mindset and a strong understanding of how to balance regulatory requirements with business needs.
• Strong problem-solving skills and the ability to operate in a dynamic environment.
• A collaborative approach and willingness to work closely with different parts of the organization.
• Professional proficiency in both Swedish and English (Finnish or German is a plus).
• Based in Stockholm, with EU/EEA residency or citizenship.

Nice to Have

• Certifications such as CISM or ISO 27001 Lead Implementer.

We Offer

• A fantastic office in a prime Stockholm location with great spaces and views.
• An independent role with the opportunity to make a real impact.
• Great opportunities for professional development.
• Health - 5,000 kr health care allowance.
• Conference abroad every other year.
• Breakfast and fruits every day, as well as "holy fika” each Friday.
• Regular after work and celebrated successes at the office.

About the Company

Northmill Bank is a tech company with a banking license aiming to improve financial life, offer merchants smart solutions, and erase the borders between in-store and online.

Northmill creates a more personal and relevant experience for people and companies, helping more than 2,500 merchants and 250,000 end users.

Trustpilot 4.5 of 5

Cloud 100 %

End users 250,000

Founded in 2006

Co-workers 240

Turnover ≈750 MSEK

Apply today and be a part of Northmill!