Director of Information Security Governance & Compliance

Sobi; Sweden; Hybrid; SEK 862,254 - 1,293,381; Full time

Benefits offered by this job

Collaborative environment

Professional growth opportunities

Diversity and Inclusion

Competitive compensation

Emphasis on work/life balance

Job summary

Sobi is seeking a Director of Information Security Governance & Compliance to ensure a robust information security framework. This role involves leading governance activities, driving audits, and overseeing continuous improvement initiatives within a collaborative, hybrid workspace.

The ideal candidate has significant experience in information security governance in regulated environments and possesses strong analytical skills. This position offers competitive compensation and a focus on work/life balance, enabling impactful contributions to ultra-rare disease patients.

Qualifications

• Strong experience in information security governance, risk and compliance.
• Solid knowledge of frameworks like NIS2, GDPR, ISO 27001.
• Proven ability to lead audits and compliance programs.

Responsibilities

• Lead Sobi's information security governance framework.
• Conduct internal and external compliance audits.
• Establish compliance and risk metrics.

Skills

Information security governance

Risk management

Compliance frameworks

Stakeholder management

Analytical skills

Job description

About the Role

As the Director of Information Security Governance & Compliance, you will play a key leadership role in ensuring that Sobi's information security framework is robust, effective and fit for a highly regulated environment. You will lead governance and compliance activities across Sobi and our external partners, drive audits and control reviews, maintain a strong and up-to-date ISMS, and oversee CAPA and continuous improvement initiatives. In this role, you will work closely with the CISO, Quality and key stakeholders across the business to make sure our policies, processes and responsibilities are clear, aligned and continuously improving.

You will join our Global Information Security team, report to the CISO, and be based at our Stockholm HQ or Global Hub in Basel. This is a hybrid role with the opportunity to work in an international setting where your expertise will have visible impact across the organisation.

Impact

• Lead and evolve Sobi's information security governance framework and ISMS, including policies, standards and procedures.
• Ensure alignment with key regulatory and industry frameworks such as NIS2, GDPR and ISO 27001.
• Plan and lead internal and external audits, as well as compliance reviews across the organisation and third parties.
• Oversee incident follow-up, root cause analysis, CAPA activities and risk mitigation tracking to closure.
• Establish meaningful compliance and risk metrics, continuous improvement processes and provide clear reporting to support decision-making.
• Partner closely with the CISO, Quality, business stakeholders, auditors and external partners to build a strong culture of accountability and security awareness.

Qualifications

About you

You are a confident and pragmatic information security leader who enjoys combining governance, compliance and continuous improvement in a way that creates real business value. You are comfortable navigating a complex, regulated environment and know how to translate frameworks and requirements into practical ways of working. Just as importantly, you build trust across functions and communicate with clarity—whether you are partnering with senior stakeholders, supporting audits, or driving follow‑up actions with the wider organisation. You bring a structured and proactive mindset, a strong sense of ownership, and a genuine interest in building a security culture that is both effective and sustainable.

• Strong experience in information security governance, risk and compliance, ideally in a global or highly regulated environment.
• Solid knowledge of relevant frameworks and regulations such as NIS2, GDPR, ISO 27001 and ideally GxP/ALCOA+ or GAMP.
• A proven ability to lead audits, compliance programmes and continuous improvement initiatives.
• Experience working with third‑party assessments, supplier compliance or external oversight.
• Strong analytical skills with the ability to prioritise, follow through and create structure in complex topics.
• Excellent communication and stakeholder management skills, with the confidence to influence across functions and levels.

Benefits

• Collaborative and team‑oriented environment
• Opportunities for professional growth
• Diversity and Inclusion
• Competitive compensation for your work
• Making a positive impact to help ultra‑rare disease patients who are in need of life‑saving treatments
• Emphasis on work/life balance