Strategic Cyber GRC Lead - ISO 27001 & ISMS Expert

SSAB

Helsinki

Hybrid

EUR 120,000 - 180,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

SSAB seeks an experienced Cybersecurity GRC Lead to strengthen the governance foundation and enable business growth with confidence. You will drive the ISMS aligned with ISO 27001, lead audits, and advise business leaders and IT teams globally to improve maturity and reduce risk.

This highly visible expert role reports to the Group CISO and may be based in Helsinki or Stockholm, with no relocation support provided.

Qualifications

Extensive experience in cybersecurity governance, risk and compliance, ideally in manufacturing.
Proven track record leading ISO 27001 implementation or certification journeys.
Strong ability to drive compliance topics in matrix environments and audits.

Responsibilities

Lead GRC program across the Group and drive shared accountability for cybersecurity.
Develop and maintain Group-wide ISMS to protect information assets.
Drive ISO 27001 alignment, regulatory compliance incl. NIS2/TISAX and risk remediation.
Create and maintain cybersecurity directives, ownership, and control accountability.
Lead supplier cybersecurity assurance with Procurement and manage audits.
Coordinate audits with auditors, regulators, customers, and certification bodies.
Oversee cybersecurity reporting, KPIs, and leadership reviews.