Chief Information Security Officer

Tele2 Sweden AB; Stockholms kommun; On-site; SEK 1,200,000 - 1,600,000; Full time

Job summary

Tele2 Sweden AB is seeking a Chief Information Security Officer to lead its information security initiatives. The successful candidate will oversee security governance, risk management, and compliance while ensuring alignment with business objectives.

The role requires several years of experience in information security, along with a strategic and practical approach to security governance. Excellent communication skills in Swedish and English are essential. The position is based in Stockholms län.

Qualifications

• Several years of experience in information security, cyber security, IT risk, governance, or compliance.
• Experience working with security frameworks and standards such as ISO 27001, NIST CSF, PCI DSS.
• Excellent written and verbal communication skills in Swedish and English.

Responsibilities

• Lead and develop Tele2’s information security strategy.
• Ensure compliance with relevant laws and regulations.
• Act as an advisor to senior management on security matters.

Skills

Information security

Cyber security

Risk management

Security governance

Communication skills in Swedish and English

Tools

ISO 27001

NIST CSF

PCI DSS

Job description

About the job

As Chief Information Security Officer, you will be responsible for leading and further developing Tele2’s information security work, including governance, frameworks, risk management, compliance, and security culture. You will ensure that security activities are business-oriented, risk-based, and aligned with both current requirements and future threats.

Responsibilities

Your responsibilities will include:

• Leading and developing Tele2’s information security strategy and security governance.
  Managing and developing a team of four employees within the CISO Office.
• Ensuring close, daily collaboration with the Cyber Security department to align governance, risk, compliance, operational security priorities, and cyber resilience.
• Ensuring compliance with relevant laws, regulations, standards, and internal requirements.
• Driving a risk-based approach to information security, cyber risks, and critical assets.
• Acting as an advisor to senior management and the business on security-related matters.
• Developing processes, policies, controls, and follow-up models within information security.
• Collaborating with internal and external stakeholders, including supervisory authorities, auditors, suppliers, and group functions.
• Strengthening the security culture through clear communication, training, and stakeholder engagement.
• Contributing to Tele2 staying at the forefront of modern information security, including the use of AI to support analysis, risk management, incident handling, and more efficient security work.

Who are you?

We’re looking for someone with solid experience in information security, cyber security, risk management, or security governance in a complex organization. You can combine a strategic overview with practical execution and thrive in a role where you lead, influence, and build trust.

Qualifications

We would like you to have:

• Several years of experience in information security, cyber security, IT risk, governance, or compliance.
• Experience working with security frameworks and standards such as ISO 27001, 42001, NIST CSF, PCI DSS and ENS.
• Experience leading security work in a larger, regulated, or critical infrastructure organisation.
• Excellent written and verbal communication skills in Swedish and English.
• A good understanding of regulatory requirements, risk management, internal control, and security governance.
• The ability to translate complex security matters into clear decisions, priorities, and business-relevant communication.
• Experience reporting to senior management, boards, audit committees, or similar forums.
• Preferably previous leadership experience, preferably including people management responsibility.
• A strong interest in how AI can be used responsibly and effectively within information security, for example in threat analysis, vulnerability management, security monitoring, automation, policy work, and risk assessment.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor, or equivalent are meritorious but not required.

As a person

We believe you are confident, clear, and trustworthy. You have high integrity, strong analytical skills, and the ability to navigate complex environments with many stakeholders. You are both strategic and pragmatic, with the ability to create structure, drive change, and bring the organization with you.

You are able to build strong relationships and create trust across the organization. You are solution-oriented, business-minded, and used to prioritizing based on risk. You are curious about new technology and want to develop security work through modern tools, data, and AI.