Senior IT & Information Security Officer

About the Position

Senior IT & Information Security Officer

We are a well-funded startup building tools to help society withstand and adapt to security threats, natural disasters, extreme weather, and other risks. Our platform enables simulation, scenario planning, incident management, and early warning, and is used in environments where availability, robustness, and security are crucial.

We work closely with authorities and critical infrastructure actors, which means high demands on both technical security and compliance with regulatory requirements.

---

Responsibilities

• Ensure compliance with the Security Protection Act, NIS2/Cybersecurity Act, and ISO 27001
• Build, develop, and manage the organization's work in information security, IT security, risk management, and incident management
• Conduct information classification and risk analyses, and develop, implement, and update security policies, guidelines, and other governing documents
• Lead and coordinate incident and crisis management, from initial assessment and actions to follow-up and reporting to relevant authorities
• Perform vendor assessments and due diligence focusing on supply chain security
• Plan and conduct training in information and cyber security
• Report security status, risks, and compliance to management and other decision-makers
• Translate regulatory, operational, and security-related requirements into product strategy, priorities, and business improvements

---

Requirements

• Solid experience in information security, IT security, or security management
• Documented experience in applying the Security Protection Act and NIS2/Cybersecurity Act in practice
• Experience in building or further developing security processes, conducting risk analyses, developing governing documents, and driving implementation together with the business
• Experience in working in complex environments with many stakeholders and high demands on security and compliance
• Experience in translating legal and security requirements into practical work methods, clear priorities, and solutions that work in the business
• Fluent in Swedish and English, both spoken and written

Experience with ISO 27001 and certifications such as CISSP, CISM, or equivalent is advantageous.

---

We Offer

• Competitive compensation and long-term upside in a company with strong growth and a clear societal purpose
• A flexible work environment with a large mandate to influence, where you will have the opportunity to build and develop security work in close collaboration with management, product, and technology

---

About the Company

Our mission is to solve the prevailing shortage of IT-competence and thereby, play a central role within the increasing need for recruiting programmers and developers.

In order to do that, our strategy is to specialize in headhunting and roles that are difficult to recruit. This has led us to develop models for how to attract and engage the right candidates. With an agile approach, solid networks, and close cooperation with our customers, we are the market leaders within recruiting tech competence and provide our customers the conditions to continue growing.

Founded in 2008, we have over 50 co-workers in Stockholm, working in a hybrid environment.

---

Location: Stockholm, SE

Employment Type: FULL_TIME

Work Location Type: Hybrid