Cyber Risk & Security Program Lead (Hybrid, Sweden)

Getinge AB; Stockholms kommun; Hybrid; SEK 750,000 - 1,100,000; Full time

Job summary

Getinge AB invites you to join its cybersecurity organization in Sweden. In this role you will coordinate risk, compliance, and program activities to ensure cybersecurity initiatives are delivered effectively and aligned with business priorities.

You will work across Central IT, Business IT/OT and corporate functions to drive governance, support obligations such as NIS2 and ISO 27001, and maintain KPIs reported to the CISO and executive management.

Qualifications

• Degree in Information Security, IT, Risk Management, or equivalent experience.
• Experience in cybersecurity governance, risk, and compliance.
• Experience in regulated environments (NIS2, ISO 27001, GDPR security).
• Proven ability to drive execution across complex, federated organizations.
• Strong stakeholder management and communication skills.

Responsibilities

• Coordinate risk, compliance, and program activities to deliver cybersecurity initiatives.
• Translate risk insights into prioritized actions and track mitigation progress.
• Own and drive the cybersecurity process and initiative portfolio across IT/OT and corporate functions.
• Support execution of cybersecurity compliance obligations such as NIS2, ISO 27001, and internal audits.
• Define and maintain cybersecurity KPIs and provide reporting to the CISO and executive management.

Skills

Cybersecurity governance

Risk management

Regulated environments

Stakeholder management

Communication skills

Cross-functional collaboration

Education

Degree in Information Security, IT, Risk Management

Job description

Getinge AB invites you to join its cybersecurity organization in Sweden. In this role you will coordinate risk, compliance, and program activities to ensure cybersecurity initiatives are delivered effectively and aligned with business priorities.

You will work across Central IT, Business IT/OT and corporate functions to drive governance, support obligations such as NIS2 and ISO 27001, and maintain KPIs reported to the CISO and executive management.