Head of Information Security – Stockholm

Sway Sourcing Sweden Aktiebolag; Stockholms kommun; Presencial; SEK 1 200 000 - 1 700 000; Tempo integral

Resumo da oferta

Sway Sourcing Sweden Aktiebolag is seeking a Head of Information Security in Stockholm to lead cybersecurity governance and risk management in a complex organisation.

You will oversee the ISMS, coordinate with senior management, IT, and suppliers, and translate security requirements into actionable priorities while working on-site in Stockholm.

Qualificações

• Extensive experience in information security and cybersecurity within a large, decentralised and/or international organisation.
• Strong experience in security governance, information security frameworks and risk assessments.
• Practical experience developing and maintaining an Information Security Management System (ISMS).
• The ability to translate technical security risks and regulatory requirements into clear business priorities and actionable measures.
• Experience defining security requirements for IT solutions, digital services and organisational changes.
• Experience assessing supplier security risks and supporting security requirements in procurement and contracts.
• Strong stakeholder management skills and experience collaborating across IT, business functions and senior management.
• Good understanding of cybersecurity regulations, including NIS2 and GDPR-related security requirements.
• Excellent communication skills and the ability to engage both technical specialists and senior decision-makers.
• Fluency in Swedish and English, both written and spoken.

Responsabilidades

• Lead and develop the organisation's information security framework, policies and working methods.
• Identify, assess and manage information security and cybersecurity risks.
• Maintain and improve the Information Security Management System (ISMS), including relevant policies and governing documents.
• Conduct and facilitate security risk assessments and recommend appropriate mitigation measures.
• Monitor security incidents, deviations, identified risks and improvement initiatives.
• Define and review information security requirements for IT systems, digital services and projects.
• Provide security guidance to architects, IT teams, project managers and business stakeholders.
• Establish security requirements for procurement processes, contracts and supplier relationships.
• Assess supplier security risks and follow up on remediation activities.
• Coordinate information security initiatives across IT, Compliance, Procurement and business functions.
• Present security risks, priorities and recommendations to senior management.

Conhecimentos

Information security

Cybersecurity governance

Risk assessment

ISMS

Stakeholder management

Procurement security

Regulatory knowledge

Swedish language

English language

Leadership

Descrição da oferta de emprego

Head of Information Security – Stockholm

Kommun: Stockholm

Head of Information Security – Stockholm

Are you an experienced information security professional ready to take a leading role in strengthening cybersecurity governance and risk management? We are looking for a senior specialist who can combine strategic security leadership with hands‑on execution in a complex organisation.

About the Assignment

We are looking for a Head of Information Security for a consulting assignment in Stockholm.

In this role, you will lead and coordinate information security activities across a large organisation, ensuring that cybersecurity risks are identified, assessed and managed through a structured, risk‑based approach.

You will work closely with senior management, IT, business functions and external suppliers to translate security requirements and regulatory obligations into practical measures and clear priorities.

The position offers the opportunity to influence security governance, strengthen organisational resilience and contribute to the continuous improvement of information security processes.

Key Responsibilities

• Lead and develop the organisation's information security framework, policies and working methods.
• Identify, assess and manage information security and cybersecurity risks.
• Maintain and improve the Information Security Management System (ISMS), including relevant policies and governing documents.
• Conduct and facilitate security risk assessments and recommend appropriate mitigation measures.
• Monitor security incidents, deviations, identified risks and improvement initiatives.
• Define and review information security requirements for IT systems, digital services and projects.
• Provide security guidance to architects, IT teams, project managers and business stakeholders.
• Establish security requirements for procurement processes, contracts and supplier relationships.
• Assess supplier security risks and follow up on remediation activities.
• Coordinate information security initiatives across IT, Compliance, Procurement and business functions.
• Present security risks, priorities and recommendations to senior management.

Requirements

We are looking for someone who has:

• Extensive experience in information security and cybersecurity within a large, decentralised and/or international organisation.
• Strong experience in security governance, information security frameworks and risk assessments.
• Practical experience developing and maintaining an Information Security Management System (ISMS).
• The ability to translate technical security risks and regulatory requirements into clear business priorities and actionable measures.
• Experience defining security requirements for IT solutions, digital services and organisational changes.
• Experience assessing supplier security risks and supporting security requirements in procurement and contracts.
• Strong stakeholder management skills and experience collaborating across IT, business functions and senior management.
• Good understanding of cybersecurity regulations, including NIS2 and GDPR-related security requirements.
• Excellent communication skills and the ability to engage both technical specialists and senior decision‑makers.
• Fluency in Swedish and English, both written and spoken.

Who Are You?

You are a confident and analytical information security professional with a structured, pragmatic and solution‑oriented approach.

You can balance strategic security objectives with practical implementation and are comfortable working independently while coordinating multiple stakeholders.

You communicate complex security matters clearly, build trust across different organisational functions and know how to turn risk assessments into meaningful actions.

You are proactive, responsible and motivated by improving security maturity in a complex business environment.

Why Join This Assignment?

This is an opportunity to take a central role in shaping information security governance and supporting important security decisions within an established organisation.

You will work with a broad range of security challenges, collaborate closely with senior stakeholders and contribute to strengthening the organisation's overall cybersecurity resilience.

A background check is mandatory before the assignment begins.

Assignment Details

Location: Stockholm, Sweden Period: 16 November 2026 – 30 April 2027 Scope: Full-time, 40 hours per week Working model: On‑site, 5 days per wee