Information Risk and Compliance Officer

WeQuel; Södertälje kommun; On-site; SEK 750,000 - 950,000; Full time

Job summary

WeQuel is seeking an Information Risk and Compliance Officer in Södertälje to join the Production & Logistics organisation. You will blend strategic and operational security governance with risk management, ensuring ISMS-aligned documentation and compliance for client requirements.

You will collaborate with Cybersecurity Manager and stakeholders across multiple interfaces, driving activities independently while delivering high-quality documentation in English and Swedish.

Qualifications

• Experience in information security governance, risk and compliance work.
• Experience of supporting governance processes, documentation activities, or coordination of security-related work.
• Experience of risk assessments and follow-up activities.
• Ability to translate complex security and compliance requirements into clear documentation.
• Fluent Swedish and English, both spoken and written.
• Strong documentation and analytical skills with ability to structure complex information clearly.
• Strong stakeholder management and communication skills across technical and operational audiences.

Responsibilities

• Governance and continuous improvement of the ISMS within Production & Logistics.
• Support and execution of IRAM assessments and related follow-up activities.
• Contribution to information security governance, processes and coordination activities.
• Preparation and maintenance of security-related documentation, reports and presentations.
• Review, rewriting and improvement of shopfloor IT procedures and guidelines.
• Collaboration with stakeholders across Production Units, P&L IT, Maintenance and Logistics.
• Leading and coordinating the network of Local Information Security Officers (LISOs).
• Support to stakeholders in understanding and addressing information security and compliance requirements.
• Assessment of the implications of the Cyber Resilience Act (CRA) for Production & Logistics.
• Ensuring structured, consistent documentation and governance activities aligned with the ISMS.

Skills

Information security

Risk assessment

Compliance

Documentation

Stakeholder mgmt

English docs

ISO 27001 knowledge

Education

Degree in information security / related field

Job description

We at WeQuel are now looking for an Information Risk and Compliance Officer in Södertälje, where you will become an important part of the Production & Logistics organisation with a focus on information security governance, risk management and compliance. In the role you act as Information Security Officer, combining strategic and operational security governance with risk management, compliance and structured documentation activities. You contribute to strengthening security processes, supporting risk assessments and ensuring that procedures, guidelines and documentation are clear, accurate and aligned with security requirements and the client's Information Security Management System (ISMS).

As a consultant with us, you get the opportunity to work with one of our clients – leading companies within manufacturing, production and logistics – where you contribute to strengthening security processes, implementing structured ways of working and creating sustainable, compliant solutions.

Your responsibilities:

• Governance and continuous improvement of the ISMS within Production & Logistics
• Support and execution of IRAM assessments and related follow-up activities
• Contribution to information security governance, processes and coordination activities
• Preparation and maintenance of security-related documentation, reports and presentations
• Review, rewriting and improvement of shopfloor IT procedures and guidelines
• Collaboration with stakeholders across Production Units (PRUs), P&L IT (IN), Maintenance and Logistics
• Leading and coordinating the network of Local Information Security Officers (LISOs)
• Support to stakeholders in understanding and addressing information security and compliance requirements
• Assessment of the implications of the Cyber Resilience Act (CRA) for Production & Logistics
• Ensuring structured, consistent documentation and governance activities aligned with the ISMS

You work in close collaboration with the Cybersecurity Manager and a broad range of stakeholders, in an environment where you independently drive your activities forward while coordinating across multiple technical and operational interfaces within the organisation.

Requirements:

• Experience within information security, cybersecurity support, risk management or compliance-related activities
• Experience of information security governance, risk and compliance work
• Experience of supporting or implementing structured security processes and ways of working
• Experience of conducting or supporting risk assessments and follow-up activities
• Experience of supporting governance processes, documentation activities or coordination of security-related work
• Relevant academic degree or equivalent professional experience within information security, cybersecurity, risk management, compliance or a related field
• Fluent Swedish and English, both spoken and written
• Strong ability to produce professional documentation and deliverables in English
• Strong documentation and analytical skills, with the ability to structure complex information clearly
• Ability to develop, review and improve security-related procedures, guidelines and documentation
• Ability to translate complex security and compliance requirements into clear, practical documentation
• Ability to coordinate activities across multiple stakeholders, functions and organisational areas
• Strong stakeholder management and communication skills, towards both technical and operational stakeholders
• Structured, proactive and solution-oriented, with a high focus on quality and accuracy
• Comfortable taking ownership and working across multiple parallel activities

Meriting:

• ISO 27000 certification and/or practical experience of ISO 27001 frameworks
• Knowledge of the Cyber Resilience Act (CRA) and NIS2
• Experience of Cybersecurity Management Systems (CSMS)
• Experience from industrial, production or manufacturing environments
• Experience of IT/OT environments

Who you are:

You are a structured and detail-oriented information security professional with strong analytical skills and a high focus on quality. You take a proactive and solution-oriented approach and are comfortable taking ownership of your activities while collaborating closely with stakeholders across different functions and areas of expertise. You communicate clearly with both technical and operational stakeholders and can translate complex information, security requirements and governance needs into structured and understandable documentation.

Assignment details

• Location: Södertälje, Sweden
• Start – End date: 2026-09-14 – 2027-03-31 (September 2026 – March 2027)
• Workload: 100% (full-time)
• Remote: 100% ONSITE
• Interview format: Remote / Teams interview
• Language: Fluent Swedish and English, both spoken and written

We offer:

At WeQuel you become part of a consultant team that values people first – we believe success is created through commitment, collaboration and development. We offer a flat organisation with short decision paths, a strong sense of community and the opportunity to influence your own development.