Cyber Security & Compliance Lead

Ants - Tech Recruiters; Stockholms kommun; On-site; SEK 700,000 - 900,000; Full time

Job summary

EQUA Simulation AB is seeking a Cyber Security & Compliance Lead in Solna, Sweden. This role involves leading efforts to enhance information security and regulatory compliance within the organization, with a focus on ISO 27001 and GDPR. Ideal candidates will have over 5 years of experience in cyber security and solid knowledge in compliance practices. A hands-on approach is necessary as you will work closely with various teams while driving critical security initiatives that influence the company's long-term strategic viability.

Qualifications

• 5+ years of experience in information security, cyber security, or IT governance.
• Experience implementing ISO 27001 or similar frameworks.
• Understanding of security and compliance in a software environment.

Responsibilities

• Leading the implementation of EQUA’s Information Security Management System (ISMS).
• Driving compliance initiatives related to NIS2, CRA, and GDPR.
• Maintaining compliance documentation and conducting internal audits.

Skills

Information security

Cyber security

IT governance

Regulatory compliance (GDPR)

Communication skills

OWASP Security Champion

Tools

Cyberday

DevSecOps

CISSP

CISM

ISO 27001 Lead Implementer/Auditor

CDPO

Job description

Location: Solna, Sweden

Would you like to take on a hands‑on key role in a growing international software company where cyber security and compliance are becoming increasingly business‑critical? EQUA Simulation AB is now looking for a Cyber Security & Compliance Lead to build, lead and drive the company’s work within information security, regulatory compliance, and data protection.

About EQUA Simulation AB

EQUA Simulation AB is a Swedish software company headquartered in Solna. Since 1995, we have been developing advanced simulation software for buildings, tunnels, and energy systems. Our solutions are used by engineers and consultants around the world in projects where energy efficiency, indoor climate, and safety are critical. As part of an international group with operations across several European countries, EQUA offers a stable, international, and long‑term environment where people are given the opportunity to make a real impact.

About the role

In this role, you will lead and coordinate EQUA’s work within cyber security, information security, regulatory compliance and data protection. A central part of the assignment will be to continue developing the company’s Information Security Management System (ISMS) in line with ISO 27001, strengthen compliance with NIS2, the Cyber Resilience Act (CRA), and GDPR, and ensure that policies, processes, and controls are implemented across the organisation.

EQUA has already started building its security framework in Cyberday, and this role will be responsible for continuing and driving that work forward. The objective is to support EQUA in reaching ISO 27001 compatibility in 2026 and certification in 2027, while establishing a robust long‑term security and compliance framework suited to a growing international software company.

You will work closely with management, development teams, IT, and external partners, combining structured governance work with a hands‑on and practical approach.

Your responsibilities will include:

• Leading the implementation and continuous improvement of EQUA’s ISMS in line with ISO 27001
• Driving compliance initiatives related to NIS2, CRA, and GDPR
• Maintaining policies, procedures, risk assessments, and compliance documentation
• Coordinating internal audits, management reviews, and certification preparation
• Supporting secure software development practices, vulnerability management, and product security requirements
• Further developing and maintaining the company’s work in Cyberday
• Supporting the organisation with security awareness, guidance, and cross‑functional coordination

We believe you bring:

• 5+ years of experience in information security, cyber security, or IT governance
• Experience implementing ISO 27001 or similar frameworks
• Experience working with GDPR and broader regulatory compliance
• A solid understanding of security and compliance in a software, SaaS, or technology‑driven environment
• Experience as an OWASP Security Champion and familiarity with OWASP top 10 risks and mitigations
• Experience working closely with software development teams and an understanding of secure development practices
• The ability to translate regulatory and security requirements into practical processes and ways of working
• Strong communication skills and the ability to work effectively with both technical and non‑technical stakeholders
• Experience with Cyberday, DevSecOps, software security, or certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or CDPO is considered an advantage

Who you are

You are structured, pragmatic, and self‑driven, with the ability to work both strategically and hands‑on. You build trust, create clarity in complex topics, and move initiatives forward in a practical way. We also believe you are proactive and able to independently lead complex initiatives across functions and stakeholders.

Why join EQUA?

This is an opportunity to step into a key role in an international software company where your expertise will truly matter. At EQUA, you will have the chance to shape an area of growing strategic importance, work closely with committed colleagues across the business, and contribute to building a secure and sustainable foundation for the future.

For the right person, this role offers both responsibility and influence in a stable, professional, and long‑term environment where your contribution will be visible, valued, and impactful.