Information Security GRC Leader — SMS & Compliance

Saab AB; Göteborgs kommun; On-site; SEK 900,000 - 1,300,000; Full time

Job summary

Saab AB in Sweden is seeking an Information Security Manager to lead the Governance, Risk & Compliance team within the Information & Cyber Security Organization. You will bridge high-level governance with operational execution, turning strategy into practical security controls across the enterprise.

You will work in an international environment, drive SMS modernization, and ensure regulatory alignment with ISO/IEC 27001 while enabling business with security as a competitive advantage.

Qualifications

• Proven experience leading teams of highly skilled specialists.
• Strong strategic mindset translating business goals into actionable priorities.
• Excellent analytical and problem-solving skills with a proactive, solution-oriented approach.
• Strong communication and stakeholder management skills in both Swedish and English.
• Good understanding of relevant regulations, standards and security best practices.

Responsibilities

• Lead the strategic development of the Security Management System (SMS), ensuring alignment with ISO/IEC 27001, regulatory requirements and business objectives.
• Drive the translation of security strategy into practical guidelines and processes across the organization.
• Ensure alignment with IT and technical functions so that security controls and risk mitigation are applied throughout the IT lifecycle.
• Lead modernization initiatives, including automation and digitalization of security processes.
• Oversee compliance, security controls and risk management to ensure effective mitigation of risks and identified gaps.

Skills

Leading teams

Strategic mindset

Analytical skills

Stakeholder management

Security standards

Job description

Saab AB in Sweden is seeking an Information Security Manager to lead the Governance, Risk & Compliance team within the Information & Cyber Security Organization. You will bridge high-level governance with operational execution, turning strategy into practical security controls across the enterprise.

You will work in an international environment, drive SMS modernization, and ensure regulatory alignment with ISO/IEC 27001 while enabling business with security as a competitive advantage.