Hybrid Information Security Manager – GDPR & ISO 27001

IST Group AB; Kalmar kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Job summary

IST Group AB, a leading Scandinavian EdTech company, is seeking an Information Security Manager to shape and implement our information security framework. You will partner with product, development, customers and auditors to embed security by design across the IST Group.

This role emphasizes governance, risk management and regulatory compliance (GDPR, NIS2, ISO 27001), driving security awareness and incident response.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, IT, Law, Business, or related field.
• Experience with information security, cybersecurity, risk management and/or compliance.
• Experience with GDPR, ISO 27001, NIS2, ISAE 3000, SOC reporting or similar frameworks.
• Experience supporting audits, inspections, or compliance reviews.
• Ability to communicate complex security topics to technical and non-technical audiences.

Responsibilities

• Develop and maintain information security policies, standards, and procedures across the Group.
• Lead and coordinate information security governance activities.
• Drive compliance with GDPR, NIS2, ISO 27001, ISAE 3000 and related requirements.
• Manage and coordinate security incidents, investigations, and corrective actions.
• Conduct risk assessments and support enterprise risk management activities.
• Collaborate with product development teams to embed privacy and security by design.
• Support audits, security reviews, and due diligence processes.
• Manage data processing agreements and security-related documentation.
• Drive security awareness initiatives and promote a strong security culture.

Skills

Information security

Stakeholder management

Communication

Audits & governance

Security awareness

Education

Bachelor’s degree in Information Security or related field

Job description

IST Group AB, a leading Scandinavian EdTech company, is seeking an Information Security Manager to shape and implement our information security framework. You will partner with product, development, customers and auditors to embed security by design across the IST Group.

This role emphasizes governance, risk management and regulatory compliance (GDPR, NIS2, ISO 27001), driving security awareness and incident response.