Information Security & Compliance Lead

IST Group AB; Växjö kommun; Hybrid; SEK 900,000 - 1,100,000; Full time

Job summary

IST Group AB, a leading Scandinavia EdTech company, is seeking an Information Security Manager to develop and maintain the group's information security framework, working with product and development teams, customers, auditors and external stakeholders.

The role combines strategic governance with hands-on security operations, embedding privacy by design and coordinating security incidents, audits and risk management across multiple countries and business areas.

Qualifications

• Bachelor's degree in Information Security, Computer Science, IT, Law, Business, or related field.
• Experience with information security, cybersecurity, risk management and/or compliance.
• Experience with GDPR, ISO 27001, NIS2, ISAE 3000, SOC reporting, or similar frameworks.
• Experience supporting audits, inspections, or compliance reviews.
• Ability to communicate complex security topics to both technical and non-technical audiences.
• Strong stakeholder management and collaboration skills.
• Proactive, self-driven, and structured working style.
• Certifications such as ISO 27001, CISSP, CISM, CRISC are advantageous.

Responsibilities

• Develop and maintain information security policies, standards, and procedures across the Group.
• Lead and coordinate information security governance activities.
• Drive compliance with relevant regulations and frameworks, including GDPR, NIS2, ISO 27001, ISAE 3000, and related requirements.
• Manage and coordinate security incidents, investigations, and corrective actions.
• Conduct risk assessments and support enterprise risk management activities.
• Collaborate with product development teams to embed privacy and security by design.
• Support audits, security reviews, and due diligence processes.
• Manage and maintain data processing agreements and security‑related documentation.
• Drive security awareness initiatives and promote a strong security culture throughout the organization.
• Prepare reports and security metrics for management and key stakeholders.

Skills

Stakeholder management

Security governance

Communication skills

Proactive mindset

Education

Bachelor's degree in Information Security / related field

Certs such as ISO 27001, CISSP, CISM, CRISC considered an advantage

Job description

IST Group AB, a leading Scandinavia EdTech company, is seeking an Information Security Manager to develop and maintain the group's information security framework, working with product and development teams, customers, auditors and external stakeholders.

The role combines strategic governance with hands-on security operations, embedding privacy by design and coordinating security incidents, audits and risk management across multiple countries and business areas.