Information Security Advisor

Redigo Cybersecurity; Örebro kommun; Hybrid; SEK 600 000 - 800 000; Full time

Job summary

A leading cybersecurity firm in Örebro is seeking an Information Security Advisor to enhance security measures across different industries. The role offers growth opportunities, competitive salary, and a range of benefits including a tech kit and flexible working conditions. Ideal candidates have over 3 years of experience, strong knowledge of compliance standards, and excellent communication skills.

Benefits

Competitive salary

Growth opportunities

Flexible work-from-home schedules

Team conferences and annual trips

Cyber tech kit including MacBook or PC, iPhone

Qualifications

• 3+ years of experience in the information security industry.
• Experience with compliance and governance frameworks such as ISO 27001 and NIST 800-53.
• Ability to conduct risk assessments and communicate with stakeholders.

Responsibilities

• Work on information security programs across various industries.
• Conduct audits and ensure compliance with security standards.
• Manage cyber risk and facilitate compliance improvements.

Skills

End-to-end internal and external audit certification programs

Knowledge of regulatory standards (PCI-DSS, GDPR, etc.)

Risk management

Ability to communicate technical topics

Excellent oral and written communication skills

Proactive and self-motivated

Job description

Overview

Our Business Area Resilience & Readiness is expanding, and we're seeking new talent to join us on our exciting journey. Working at Redigo means being part of a young, international, and fast-paced cybersecurity company that values making an impact and taking on responsibilities while having fun. We apply a secure-by-design approach to cybersecurity and adhere to our core values of being Aware, Agile and Amusing.

As an Information Security Advisor, you’ll enjoy opportunities to work at the forefront of technology and development with clients across industries including Defense, Aeronautics, Finance and Automotive, among others. You’ll benefit from a competitive salary and benefits package, growth opportunities in a fast-growing industry, and ongoing training for industry certifications through our Performance Development Plans. We offer paid holidays and flexible hybrid or work-from-home schedules, team conferences, annual team trips, Holiday/Christmas parties, and regular meetups (weekly virtual or in-person).

As part of the package, you’ll receive a Cyber tech kit that includes a MacBook or PC, iPhone and plan, and you may also receive additional items such as a hoodie and socks.

What you’ll enjoy

• The opportunity to work in the forefront of technology and development with clients in Defense, Aeronautics, Finance and Automotive industries, among others.
• A competitive salary and benefits package.
• Growth opportunities in a fast-growing industry, including continuous education and training for industry certifications through our Performance Development Plans.
• Paid holidays and flexible hybrid or work-from-home schedules.
• Team conferences, annual team trips, Holiday/Christmas Party and weekly virtual or in-person meetups.
• A Cyber tech kit that includes a MacBook or PC, iPhone and plan. Hey, maybe even an awesome hoodie and matching socks.

We value your personality and passion and prioritize these over formal education and many industry certifications (though certifications are nice to have). We believe in giving you ownership of your work, so working remotely is not an issue. Your personality, passion, hunger for learning and growth, and ability to work well with others are what matter most. You’ll have the opportunity to develop your skills with the support of your colleagues. With the right attitude and mindset, you’ll thrive and achieve success together with your team.

Additionally, we’re seeking someone who:

• Has 3+ years of experience or more within Information security industry.
• Has experience in end-to-end internal and external audit certification programs to include ISO 27001 and NIST 800-53.
• Can demonstrate knowledge of regulatory standards and requirements such as PCI-DSS, Cyber Resilience Act, NIS2, SOC 2, ISO/SAE 21434, R155/R156, DORA, GDPR, KSF/ISM, FAR/DFARS and CMMC.
• Experience in a large enterprise Information Security Programs or Product Security and Governance programs.
• Experience in implementing processes and methods for auditing and addressing non-compliance to information security standards; facilitates migration of non-compliant environments to compliant environments.
• Experience in conducting risk assessments with organizations to ensure compliance with standards and currency with industry security norms.
• Knows how to manage cyber risk and can communicate technical topics to business leaders or stakeholders.
• Can demonstrate Risk Management knowledge.
• Has worked in teams or with managing teams and projects for Information Security management.
• Ability to develop and maintain effective relationships with stakeholders, customers and project team members.
• Excellent oral and written communication skills and presentation skills.
• Is proactive and self-motivated, maintaining high levels of activity.
• Possesses a positive and caring attitude.

Please note that work tests and background checks of applicants may be conducted during the recruitment process, including checking references and previous employment. Though we trust what you say, we must verify as we are a cybersecurity company.

If this describes you, then you know what to do!

Good luck!