Business Information Security Officer – EMEA & APAC

Electrolux Group; Stockholms kommun; Hybrid; SEK 1,000,000 - 1,600,000; Full time

Job summary

Electrolux Group in Stockholm, Sweden, seeks a strategic security leader to drive cyber risk management across EMEA & APAC. You will translate group policies into regional action, partner with senior management, and promote security-by-design across products and platforms.

Join us in strengthening governance, risk and compliance, and building cyber resilience with a collaborative, global team in a hybrid setup.

Qualifications

• Bachelor's or Master's degree in Cyber Security or related field, or equivalent experience.
• Extensive enterprise cybersecurity risk management experience in large organizations.
• Proven ability to influence senior leaders and translate cybersecurity into business actions.
• Strong knowledge of regulatory requirements and security standards.

Responsibilities

• Translate Group Cyber Security strategy into regional priorities for EMEA & APAC.
• Act as a trusted advisor to business and technology leadership on security.
• Identify and communicate cybersecurity risks to executives.
• Drive security-by-design adoption across products, platforms and initiatives.
• Coordinate vulnerability remediation and incident readiness regionally.
• Support governance, risk and compliance across regional operations.

Skills

Cybersecurity Strategy

Cyber Risk Management

Governance & Compliance

Security-by-Design

Incident Coordination

Vulnerability Reduction

Executive Stakeholder Management

Security Awareness

Change Leadership

Education

Cyber Security Degree

Equivalent Experience

Job description

Job Description

Be part of something bigger. Decode the future. At Electrolux Group, our vision is to be the home appliance industry leader in consumer satisfaction by delivering outstanding lifetime experiences with solutions that always get better.

Job Description Be part of something bigger. Decode the future. At Electrolux Group, our vision is to be the home appliance industry leader in consumer satisfaction by delivering outstanding lifetime experiences with solutions that always get better.
We share ideas and collaborate so that together, we can develop solutions that deliver more enjoyable and sustainable living.
Come join us as you are. We believe diverse perspectives make us stronger and more innovative. In our global community of people from 100+ countries, we listen to each other, actively contribute, and grow together.
Join us in our exciting quest to build the future home.

All about the role:

The Business Information Security Officer (BISO) – EMEA & APAC ensures cybersecurity is a strategic enabler for business growth, transformation and innovation across the region.
The BISO acts as the strategic bridge between Group Cyber Security and regional business priorities, translating Group cybersecurity strategy, policies and standards into actionable plans across EMEA & APAC.
Working across business, Product and Technology domains, the role helps ensure cybersecurity risks are understood, appropriately managed and that security is embedded by design into business processes, products, platforms and technology initiatives.
The BISO partners closely with business and technology leaders, Legal, Data Privacy, Compliance and Group Cyber Security to drive effective implementation of cybersecurity controls, regulatory requirements and risk-reduction initiatives.
The role reports to the Group CISO and works closely with the Regional CIO EMEA & APAC and regional business and technology leadership.

What you'll do:

Business alignment & cybersecurity execution

• Translate Group Cyber Security strategy into actionable regional priorities and plans across EMEA & APAC.
• Act as a trusted cybersecurity advisor to business and technology leadership.
• Partner with business and technology leaders to identify, assess, manage and communicate cybersecurity risks.
• Drive adoption of security-by-design principles across products, platforms, technology and business transformation initiatives.
• Support business ownership and accountability for cybersecurity risks and implementation of appropriate controls.
• Support the secure onboarding of new technologies, suppliers and initiatives.
• Build strong collaboration between regional stakeholders and Group Cyber Security.

Cyber risk & vulnerability management

• Coordinate regional cybersecurity risk assessments and risk-reduction activities.
• Monitor the regional cybersecurity risk posture and elevate material risks and unresolved issues.
• Support security control adoption, risk exceptions and compensating controls.
• Coordinate with IT, Product and Engineering teams to drive timely vulnerability remediation and corrective actions.
• Communicate cybersecurity risks and mitigation priorities clearly to both technical and business stakeholders.

Cybersecurity incident management & resilience

• Support regional cybersecurity incident preparedness and readiness.
• Coordinate the business response to cybersecurity incidents in collaboration with Group Cyber Security and accountable business and technology teams.
• Support assessment of business impact and facilitate recovery priorities to minimize disruption.
• Coordinate regional post-incident activities and follow-up on agreed corrective actions.
• Help strengthen cyber resilience and business preparedness across the region.

Governance, risk & compliance

• Support implementation and consistent adoption of Group Cyber Security policies, standards and controls.
• Coordinate regional cybersecurity regulatory and compliance requirements in collaboration with Legal, Data Privacy and Compliance.
• Support audit readiness, security assessments, evidence collection and security control tracking.
• Monitor compliance and highlight material gaps, exceptions and remediation needs.
• Support internal control and IT general control activities where applicable.
• Provide regional cybersecurity risk and compliance insights to Group Cyber Security and relevant business and technology leadership.

Security culture

• Promote strong cybersecurity awareness and accountability across EMEA & APAC.
• Support the Group Security Awareness Program and regional security initiatives.
• Help business and technology teams understand how individual decisions contribute to the organization's overall cybersecurity posture.
• Foster a culture where cybersecurity risks are understood, appropriately owned and considered as part of everyday business decisions.

Who you are:

• You are a strategic and business-oriented cybersecurity leader who knows how to connect cybersecurity with business priorities.
• You build strong and trusted relationships across business and technology organizations and are comfortable engaging with senior stakeholders. You can translate complex cybersecurity risks into clear business implications and practical actions.
• You combine strategic thinking with a strong focus on execution and follow-through. You are comfortable operating across organizational boundaries and influencing outcomes without relying solely on formal authority.
• You remain composed and decisive when dealing with cybersecurity risks, incidents and other situations requiring clear prioritization and coordination.
• Most importantly, you see cybersecurity not simply as a control function, but as an enabler of resilient and sustainable business.

Qualifications and experience:

• Bachelor's or Master's degree in Cyber Security, Computer Science, Information Technology or a related discipline, or equivalent relevant experience.
• Extensive experience in enterprise cybersecurity, information security, cyber risk management or related areas within large and complex organizations.
• Proven experience managing cybersecurity risks in multinational and regulated business environments.
• Strong understanding of cybersecurity strategy, governance, risk management and compliance frameworks.
• Good understanding of security architecture and security-by-design principles.
• Experience working with vulnerability management, incident response and cyber resilience.
• Good knowledge of cybersecurity regulations, compliance requirements and industry standards.
• Experience supporting cybersecurity audits, assessments, security controls and risk-remediation activities.
• Ability to assess, prioritize and communicate cybersecurity risks to both technical and non-technical stakeholders.
• Proven ability to influence decisions and drive outcomes across business, technology and security teams.
• Strong communication and stakeholder-management skills, including engagement with senior leadership.
• Relevant industry certifications such as CISSP, CISM, CRISC, CCSP or equivalent are considered an advantage.

Key competencies:

• Cybersecurity Strategy & Business Alignment
• Cyber Risk Management
• Governance, Risk & Compliance
• Security-by-Design
• Cyber Resilience & Incident Coordination
• Vulnerability & Risk-Reduction Management
• Executive Stakeholder Management
• Business Partnership & Influencing
• Regulatory Compliance & Security Standards
• Change & Transformation Leadership
• Security Culture & Awareness

Where you'll be:

This is a position based at our Global Headquarters in Stockholm (Sweden).
We are proud of our culture of inclusivity and diversity. At our Global Headquarters we have 60+ nationalities working together for our common goals.
We work in a hybrid setup that gives everyone up to 20% flexibility to work remotely, while boosting creativity and collaboration through regular office presence.