Cyber Security & Compliance Lead

Ants; Sweden; On-site; SEK 70,000 - 100,000; Full time

Job summary

EQUA Simulation AB is seeking a Cyber Security & Compliance Lead in Solna, Sweden. This role involves leading the company's cyber security efforts, managing regulatory compliance, and developing the Information Security Management System in line with ISO 27001 standards. Candidates should have over 5 years of relevant experience, a solid understanding of security frameworks, and strong communication skills. This position presents an excellent opportunity to impact security practices in a growing international software company.

Qualifications

• 5+ years of experience in information security, cyber security, or IT governance.
• Experience implementing ISO 27001 or similar frameworks.
• Solid understanding of security and compliance in a software, SaaS, or technology-driven environment.

Responsibilities

• Lead the implementation and continuous improvement of EQUA's ISMS in line with ISO 27001.
• Drive compliance initiatives related to NIS2, CRA, and GDPR.
• Maintain policies, procedures, risk assessments, and compliance documentation.

Skills

Information security

Cyber security

IT governance

Communication skills

Secure software development practices

Familiarity with OWASP top 10 risks and mitigations

Tools

Cyberday

DevSecOps

ISO 27001

CISSP

CISM

Job description

Location: Solna, Sweden

Would you like to take on a hands‑on key role in a growing international software company where cyber security and compliance are becoming increasingly business‑critical? EQUA Simulation AB is now looking for a Cyber Security & Compliance Lead to build, lead and drive the company's work within information security, regulatory compliance, and data protection.

About the role

In this role, you will lead and coordinate EQUA's work within cyber security, information security, regulatory compliance and data protection. A central part of the assignment will be to continue developing the company's Information Security Management System (ISMS) in line with ISO 27001, strengthen compliance with NIS2, the Cyber Resilience Act (CRA), and GDPR, and ensure that policies, processes, and controls are implemented across the organisation. EQUA has already started building its security framework in Cyberday, and this role will be responsible for continuing and driving that work forward. The objective is to support EQUA in reaching ISO 27001 compatibility in 2026 and certification in 2027, while establishing a robust long‑term security and compliance framework suited to a growing international software company. You will work closely with management, development teams, IT, and external partners, combining structured governance work with a hands‑on and practical approach.

Your responsibilities will include:

• Leading the implementation and continuous improvement of EQUA's ISMS in line with ISO 27001
• Driving compliance initiatives related to NIS2, CRA, and GDPR
• Maintaining policies, procedures, risk assessments, and compliance documentation
• Coordinating internal audits, management reviews, and certification preparation
• Supporting secure software development practices, vulnerability management, and product security requirements
• Further developing and maintaining the company's work in Cyberday
• Supporting the organisation with security awareness, guidance, and cross‑functional coordination

We believe you bring:

• 5+ years of experience in information security, cyber security, or IT governance
• Experience implementing ISO 27001 or similar frameworks
• Experience working with GDPR and broader regulatory compliance
• A solid understanding of security and compliance in a software, SaaS, or technology‑driven environment
• Experience as a OWASP Security Champion and familiarity with OWASP top 10 risks and mitigations
• Experience working closely with software development teams and an understanding of secure development practices
• The ability to translate regulatory and security requirements into practical processes and ways of working
• Strong communication skills and the ability to work effectively with both technical and non-technical stakeholders
• Experience with Cyberday, DevSecOps, software security, or certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or CDPO is considered an advantage

Who you are

You are structured, pragmatic, and self‑driven, with the ability to work both strategically and hands‑on. You build trust, create clarity in complex topics, and move initiatives forward in a practical way. You are also proactive and able to independently lead complex initiatives across functions and stakeholders.