Cyber Security Governance Specialist (GRC)

SSC Space; Solna kommun; On-site; SEK 700,000 - 950,000; Full time

Job summary

SSC Space is seeking a Cyber Security Governance Specialist to strengthen governance, risk, and compliance across the organization. You will translate complex cybersecurity risks into actionable decisions for business leaders and work closely with the CISO and project teams.

You will help develop SSC Space's risk framework, policies, and security controls, aligning security with business goals and international operations.

Qualifications

• University degree or equivalent experience.
• Several years of experience within cybersecurity governance, risk management, compliance, or information security.
• Experience developing policies, standards, and governance processes.
• Strong understanding of cybersecurity risk management.
• Experience advising business leaders and project teams.
• Excellent communication and stakeholder management skills.
• Ability to translate technical risks into business language.
• Experience from consulting environments is highly valued.

Responsibilities

• Governance & Security Management: Develop, maintain, and improve cybersecurity policies, standards, and guidelines; support implementation and improvement of governance framework; facilitate security steering activities; drive initiatives to improve security maturity.
• Risk Management: Conduct and facilitate cybersecurity risk assessments; maintain and improve risk processes; work with stakeholders to identify, analyze, and mitigate risks; support risk reporting to management and executives.
• Compliance & Security Assurance: Support compliance initiatives and internal security assessments; assist units in meeting requirements; contribute to audits and remediation; monitor regulatory developments.
• Security Advisory: Provide cybersecurity guidance to initiatives and projects; design practical controls; support procurement and third-party risk evaluations; act as bridge between security, IT, and business.
• Security Strategy: Support development of SSC's cybersecurity roadmap; identify opportunities to improve governance processes; contribute to long-term planning.

Skills

Governance

Risk management

Compliance

Information security

Policy development

Stakeholder management

Communication

Business language

Education

University degree

Job description

Cyber Security Governance Specialist (GRC)

Description

Help shape the future of cybersecurity governance at SSC

Cybersecurity is becoming an increasingly important strategic capability. As our business, infrastructure, and international operations continue to evolve, we are strengthening our security organization and moving from a primarily reactive approach to a more proactive, risk-driven, and business-aligned security model.

We are now looking for a Cyber Security Governance Specialist to help establish and mature how security is governed, managed, and embedded throughout the organization.

This is an opportunity for someone who enjoys connecting cybersecurity with business objectives, translating complex risks into actionable decisions, and helping leaders make informed security choices.

You will work closely with the CISO, senior stakeholders, project teams, and technical specialists across SSC, becoming a key contributor to the development of our long-term cybersecurity strategy.

Requirements

What makes this role stand out?

• High visibility and direct collaboration with executive stakeholders
• Opportunity to influence cybersecurity strategy and governance
• Work across business units, countries, and technical domains
• Help build security capabilities from the ground up
• Shape how risk management and security governance evolve within SSC
• Be part of an expanding cybersecurity function with significant growth ambitions

Your mission

As Cyber Security Governance Specialist, you will strengthen SSC's ability to manage cybersecurity risks while ensuring security enables business growth and operational excellence.

You will serve as a trusted advisor to both business and technical stakeholders and ensure that cybersecurity requirements are embedded into projects, services, and decision-making processes.

Responsibilities

Governance & Security Management

• Develop, maintain, and improve cybersecurity policies, standards, and guidelines
• Support the implementation and continuous improvement of the cybersecurity governance framework
• Facilitate security steering activities and governance forums
• Drive initiatives that improve organizational security maturity

Risk Management

• Conduct and facilitate cybersecurity risk assessments
• Maintain and improve risk management processes
• Work with business stakeholders to identify, analyze, and mitigate risks
• Support risk reporting to management and executive leadership

Compliance & Security Assurance

• Support compliance initiatives and internal security assessments
• Assist business units in understanding and meeting security requirements
• Contribute to audit activities and remediation efforts
• Monitor developments in regulatory and industry requirements

Security Advisory

• Provide cybersecurity guidance to business initiatives and projects
• Help design practical and proportional security controls
• Support procurement, vendor assessments, and third-party risk evaluations
• Act as a bridge between security, technology, and business teams

Security Strategy

• Support the development of SSC's cybersecurity roadmap
• Identify opportunities to improve governance processes and security capabilities
• Contribute to long-term security planning and prioritization

Benefits

You are a collaborative and pragmatic security professional who understands that good security is achieved through influence, communication, and business understanding.

You enjoy working with stakeholders across different disciplines and can translate cybersecurity concepts into language that drives action.

You understand both the strategic and operational aspects of cybersecurity and are comfortable balancing risk, compliance, and business needs.

What we believe you bring

• University degree or equivalent experience
• Several years of experience within cybersecurity governance, risk management, compliance, or information security
• Experience developing policies, standards, and governance processes
• Strong understanding of cybersecurity risk management
• Experience advising business leaders and project teams
• Excellent communication and stakeholder management skills
• Ability to translate technical risks into business language
• Experience from consulting environments is highly valued