Business Security & Data Privacy Officer

Orange Cyberdefense; København; On-site; DKK 900,000 - 1,100,000; Full time

Job summary

Orange Cyberdefense in Sweden seeks a Business Security & Data Privacy Officer to join the Global Security Department. This role focuses on ensuring data privacy and information security across offers to clients and ensuring supplier compliance with European regulations.

You will collaborate with stakeholders, define internal security and privacy frameworks, support DPIAs/PIAs, and drive awareness and governance. No line-management responsibilities, but a key compliance partner.

Qualifications

• Bachelor's degree or equivalent experience in information security, risk management, privacy, compliance or related field.
• At least 5+ years of relevant experience in the field.
• Strong knowledge of GDPR, DORA, NIS2, ISO 27001 and SOC 2.
• Experience with GRC tools, dashboards, compliance reporting and control monitoring.
• Experience driving implementation and adoption of processes and ways of working across cross-functional requirements.
• Strong written and verbal communication skills.

Responsibilities

• Advise and support data privacy and security topics for the Business Unit - Cyber with Business.
• Define and maintain the internal Security and Privacy framework.
• Act as a point of contact for data subject requests.
• Analyze, investigate, audit, and monitor processing activities for compliance.
• Provide DPIA/PIA advice and verify their implementation.
• Promote a Data Protection and Privacy culture.
• Define and maintain Generic Security Assurance Plans with operational teams.
• Maintain procedures for managing client audits on information security and data protection.
• Support the execution of internal and external audits.
• Assist legal, sales, and pre-sales with security requirements in contracts.

Skills

Execution capability

Procedures development

Stakeholder management

Structured approach

Ownership

Communication skills

Delivery-focused mindset

Written and verbal communication

Education

Bachelor's degree or equivalent

Tools

GRC tools

Dashboards

Compliance reporting

Control monitoring

Job description

We are looking for a Business Security & Data Privacy Officer to join the Global Security Department within Orange Cyberdefense. This is a great opportunity to be part of an important internal function.

The right candidate combines a broad knowledge of data protection and business security with a service-oriented approach. You enjoy having contact with many parts of our business, sharing your knowledge and contributing to the development of our department.

In this role, you will not have hierarchical management responsibilities, but you will play a key role in the compliance of the offers offered to our clients and in the compliance of our suppliers with National and European regulations, ISO certifications and SOC2 assurance. In this role, you collaborate with various stakeholders, effectively communicating and driving initiatives forward.

Key Responsibilities:

• Under the authority of the Business Security Officer of the Business Unit "Cyber with Business", Advise and support the Business Unit - Cyber with Business when it comes to Data Privacy and Security related topics.

• In cooperation with other members of the Global Security Department and under the functional authority of the DPO OCD, define and maintain the internal Security and Privacy framework.

• Act as a point of contact for data subject requests.

• Analyse, investigate, audit, and monitor that processing activities comply with the legal framework or the proper application of procedures, methods, or instructions relating to the protection of personal data

• Provide advice, upon request, regarding Data Protection Impact Assessments (DPIAs) or Privacy Impact Assessments (PIAs) and verify their implementation.

• Participate in awareness, and promote a \"Data Protection and Privacy\" culture

• Define and maintain, with the Orange Cyberdefense operational teams, the Generic Security Assurance Plans and certification for our cybersecurity products and services

• Maintain the procedures for managing client audits on information security and personal data protection commitments.

• Support the execution of internal and external audits.

• Provide support to the legal, sales, and pre-sales teams in responding to our clients' contractual requirements regarding information security and personal data protection (contractual clauses, questionnaires, security assurance plans, for example)

The ideal candidate will have:

• Strong execution capability and the ability to move from framework to implementation.

• Experience in defining, formalizing and improving procedures.

• Strong communication and stakeholder management skills.

• A structured, pragmatic and solution-oriented approach

• A strong sense of ownership and follow-through

We are looking for a candidatewho combines solid knowledge with a practical, delivery-focused mindset.

Required qualifications:

• Bachelor´s degree or equivalent experience acquired in other ways within Information Security, Risk Management, Privacy, Compliance or a related field

• At least 5+ years of relevant experience within the field.

• Strong knowledge of key frameworks and regulations including GDPR, DORA, NIS2, ISO 27001 and SOC 2.

• Experience with GRC tools, dashboards, compliance reporting and control monitoring.

• Experience driving implementation and adoption of processes and ways of working across cross-functional requirements.

• Strong written and verbal communication skills.

Preferred qualifications:

• ISO 27001 Lead Auditor/Implementer

• ISO 27035 Risk Manager/Lead Risk Manager

• ISO 27701 Lead Implementer/Auditor

• Relevant certifications i.e. CISSP, CISM, CISA, CRISC

• Strong business understanding and ability to apply Privacy and Security principles in a client-facing environment

• Experience of similar roles

• Ability to apply a risk-based and pragmatic approach to prioritization and implementation.

We Are Orange Cyberdefense

Orange Cyberdefense is Sweden's leading cybersecurity company. Our vision is simple yet powerful: We build a safer digital society.

We offer our customers services across a wide range of areas, from in-depth technical solutions to broader services such as security governance and management, risk modelling, and risk analysis. We have 400 colleagues in Sweden and 3,500 colleagues globally.

At Orange Cyberdefense, we are all different but share the same passion for cybersecurity - and that is our greatest strength. We are proud of our differences, experiences, and backgrounds, and we firmly believe that we need to include everyone in order to provide solutions that work for everyone. That is why we ensure that all applications are handled equally.

Other

We recruit continuously and will fill the position as soon as we find the right person.

Orange Cyberdefense - Together, we build a safer digital society.