Cyber Risk & Security Program Lead

Getinge AB; Solna kommun; Hybrid; SEK 1,000,000 - 1,200,000; Full time

Benefits offered by this job

Wellness allowance

Family benefits

Hybrid work setup

Job summary

Getinge AB is seeking a cybersecurity governance professional to drive risk prioritization and security program execution across IT and business units. The role translates strategy and regulatory requirements into measurable outcomes and reports to executive management.

The position emphasizes stakeholder management, delivery excellence, and oversight of regulatory obligations (NIS2, ISO 27001, GDPR) in a federated organization, with a flexible hybrid work setup in Sweden.

Qualifications

• Experience in cybersecurity governance, risk, and compliance.
• Experience working in regulated environments (e.g., NIS2, ISO 27001, GDPR).
• Proven ability to drive execution across complex, federated organizations.

Responsibilities

• Coordinate risk, compliance, and program activities to ensure cybersecurity initiatives are delivered effectively and aligned with business priorities.
• Support cyber risk management by translating risk insights into prioritized actions and tracking mitigation progress across IT and business units.
• Own and drive the cybersecurity process and initiative portfolio, coordinating execution across Central IT, Business IT/OT, and corporate functions.
• Support execution of cybersecurity compliance obligations such as NIS2, ISO 27001, and internal audits.
• Act as the primary interface between cybersecurity, IT delivery teams, and business stakeholders to ensure requirements are clearly understood and realistically implemented.
• Define and maintain cybersecurity KPIs and provide structured reporting to the CISO and executive management.

Skills

Cybersecurity governance

Risk management

Compliance

Stakeholder management

Communication skills

Education

Degree in Information Security, IT, Risk Management

Job description

Getinge AB is seeking a cybersecurity governance professional to drive risk prioritization and security program execution across IT and business units. The role translates strategy and regulatory requirements into measurable outcomes and reports to executive management.

The position emphasizes stakeholder management, delivery excellence, and oversight of regulatory obligations (NIS2, ISO 27001, GDPR) in a federated organization, with a flexible hybrid work setup in Sweden.