Cyber Security Officer - Offshore Wind

Vattenfall GmbH; Stockholms kommun; On-site; SEK 50,000 - 70,000; Full time

Benefits offered by this job

Good remuneration

International work environment

Professional development opportunities

Job summary

Vattenfall GmbH is seeking a Cyber Security Officer in Stockholm, responsible for enhancing compliance with ISO 27001 and related standards. The role involves supporting compliance responsibilities, driving the ISMS, and liaising with internal stakeholders during audits. Ideal candidates will possess relevant experience in information security and quality management. This position offers good remuneration, a collaborative work environment, and opportunities for personal and professional growth.

Qualifications

• Experience in compliance, information security, or quality management within a technical environment.
• Ability to balance regulatory requirements with value-driven implementation.
• Strong skills in conveying complex topics in a practical manner.

Responsibilities

• Support compliance responsibilities to mitigate risks.
• Drive the implementation of Information Security Management System (ISMS).
• Interface with internal stakeholders during audits.

Skills

Compliance

Information Security

Quality Management

Analytical Skills

Clear Communication

Education

Experience with ISO 27001

Experience with NIS2

Experience with ISO 27019

Job description

Within our Digital Engineering division in Project Delivery & Engineering, we deliver and integrate digital solutions that support renewable energy production and ensure reliable operations. As the primary provider of digital solutions for Business Unit Offshore Wind, we manage the entire value chain—from bid acquisition to asset construction and operation—focusing on Operational Technology (OT) and IT. Cybersecurity and compliance are critical pillars in this mission.

About the Role

We are looking for a Cyber Security Officer to join the first line of defence, strengthening and maintaining Vattenfall Wind’s implementation of structures and processes within ISO 27001, ISO 27019, and directives such as NIS2 and CER, steered through our internal ISMS. In this role, you will play a key part in ensuring continuous improvement and adaptation to evolving regulations, translating complex requirements into practical solutions that create business value.

Your Responsibilities

• Support the organization in fulfilling compliance responsibilities to maintain a high level of compliance risk coverage.
• Drive the implementation and ongoing maturity of the Information Security Management System (ISMS) and related compliance frameworks, including NIS2, across the organization.
• Interface with colleagues in 1st line, internal stakeholders, and 2nd line of defence—supporting internal activities leading up to audits, during audits, and afterwards, by consulting on mitigative actions to close non‑compliances findings.
• Translate ISMS requirements and best practices into clear, actionable policies for leadership and employees.
• Plan and facilitate risk assessments, advise on synergies between identified risks, and connect findings to planned projects.

Key Tasks

• Lead the internal adaptation and continued maturity of compliance with regulatory requirements through the ISMS, ensuring compliance with ISO 27001, ISO 27019, NIS2, and CER directives.
• Coordination & Follow‑up: Drive the compliance aspect of project ensuring progress, monitor deliverables, and contribute with data, presentations, and reporting.
• Documentation & Quality Assurance: Review and develop processes, guidelines, and standards to ensure accuracy, relevance, and accessibility.
• Audit & Compliance: Participate in internal and external audits, manage deviations, and ensure systems and procedures meet directive requirements.
• Cross‑functional Collaboration: Support colleagues in compliance efforts and foster a strong, cooperative work environment.

Location

• Kolding (DK)
• Amsterdam (NL)
• Stockholm (SWE)

Qualifications

You have experience in compliance, information security, or quality management within a technical, industrial, or production environment. You are structured, analytical, and thrive in roles where you create clarity and make things happen—even in areas lacking structure. You communicate clearly at all organizational levels and enjoy being a key player in identifying, solving, and implementing solutions.

Additionally, you bring

• Experience with compliance, information security, or quality systems across requirement scoping, reviewing, and assessing solutions.
• Ability to balance regulatory requirements with value‑driven implementation.
• Experience with ISO 27001 and preferably NIS2, ISO 27019, or IEC 62443.
• Strong skills in conveying complex topics in a clear, practical manner.
• Experience in planning and coordinating activities in large organizations.
• Excellent written communication skills and command of the English language.
• Personal qualities: proactive, independent, structured, and collaborative.

Benefits

Good remuneration, a challenging and international work environment, and the possibility to work with some of the best in the field. You will be working in interdisciplinary teams and you can always count on support from committed colleagues. We offer attractive employment conditions and opportunities for personal and professional development.

Equal Employment Opportunity

At Vattenfall we are convinced that diversity contributes to building a more profitable and attractive company and we strive to be a good role model regarding diversity. Vattenfall works actively for all employees to have the same opportunities and rights regardless of gender, ethnicity, age, transgender identity or expression, religion or other belief, disability or sexual orientation.