CISO & Security Leader — SaaS, Azure & Compliance (Hybrid)

Inriver; Malmö kommun; Hybrid; SEK 1,000,000 - 1,400,000; Full time

Benefits offered by this job

Supportive team culture

Social activities

Team breakfasts and Fika

Learning and development opportunities

Job summary

Inriver is seeking a CISO to lead enterprise and product security, compliance, and privacy functions. This high-impact role involves working from the HQ office in Malmö while supporting remote locations in multiple countries, engaging deeply in security management and compliance standards.

The successful candidate will bring in-depth knowledge of Microsoft Azure security and experience leading security teams, ensuring that Inriver meets all relevant compliance frameworks like SOC2 and GDPR. The role is critical for modernizing security practices in a global SaaS environment.

Qualifications

• 5+ years in information security or similar.
• Hands-on technical depth in incident response and vulnerability management.
• Strong IT management experience across Microsoft services.

Responsibilities

• Lead enterprise security and product security strategies.
• Oversee and execute penetration testing for products.
• Manage compliance programmes and run security budgets.

Skills

Information security management

Microsoft Azure security

Incident response

Budget management

Compliance expertise

Education

5+ years in information security or software engineering

Recognised certifications such as CISSP, CISM

Tools

GRC platform (e.g. Drata)

Microsoft Azure

Job description

Inriver is seeking a CISO to lead enterprise and product security, compliance, and privacy functions. This high-impact role involves working from the HQ office in Malmö while supporting remote locations in multiple countries, engaging deeply in security management and compliance standards.

The successful candidate will bring in-depth knowledge of Microsoft Azure security and experience leading security teams, ensuring that Inriver meets all relevant compliance frameworks like SOC2 and GDPR. The role is critical for modernizing security practices in a global SaaS environment.