Information Security Manager

IST Group; Kalmar kommun; Hybrid; SEK 900,000 - 1,100,000; Full time

Job summary

IST Group is seeking an Information Security Manager to lead governance and strategic security initiatives across the group’s Scandinavian operations. You will partner with product, development, and external stakeholders to embed privacy and security by design, drive regulatory compliance (GDPR, ISO 27001, NIS2), and strengthen the security culture across IST.

This is a full-time, permanent role with an office-first approach; some hybrid work across Stockholm, Växjö, Roskilde and Oslo is

Qualifications

• Bachelor's degree in Information Security, Computer Science, IT, Law, Business, or a related field.

Responsibilities

• Develop, implement, and maintain IST's information security framework across the Group.
• Collaborate with product and development teams, customers, auditors, and stakeholders to embed security.
• Lead information security governance activities and drive compliance with GDPR, NIS2, ISO 27001, ISAE 3000, and related requirements.
• Manage security incidents, risk assessments, and due diligence processes.
• Promote security awareness and prepare security metrics for management.

Job description

Overview

Do you want to help shape information security across one of Scandinavia's leading EdTech companies? At IST, we develop digital solutions that support education and learning for millions of users across Scandinavia. As Information Security Manager, you will play a key role in protecting our information assets, driving compliance initiatives, and strengthening our security culture across the IST Group.

While the role has a strong focus on our Danish operations and product portfolio, you will work on a Group level, collaborating with colleagues and stakeholders across multiple countries and business areas.

This is an opportunity for someone who wants to combine strategic security leadership with hands-on security governance in a company with a meaningful societal mission. The role serves as an important bridge between customers, operations, development, and management when security-related issues occur.

Role and responsibilities

As Information Security Manager, you will be responsible for developing, implementing, and maintaining IST's information security framework. You will work closely with product and development departments, customers, auditors, and external stakeholders to ensure that security is embedded throughout the business. You will act as a trusted advisor on information security matters, supporting both operational and strategic initiatives while continuously improving our security posture.

• Develop and maintain information security policies, standards, and procedures across the Group.
• Lead and coordinate information security governance activities.
• Drive compliance with relevant regulations and frameworks, including GDPR, NIS2, ISO 27001, ISAE 3000, and related requirements.
• Manage and coordinate security incidents, investigations, and corrective actions.
• Conduct risk assessments and support enterprise risk management activities.
• Collaborate with product development teams to embed privacy and security by design.
• Support audits, security reviews, and due diligence processes.
• Manage and maintain data processing agreements and security-related documentation.
• Drive security awareness initiatives and promote a strong security culture throughout the organization.
• Prepare reports and security metrics for management and key stakeholders.

Your profile

We believe you have the following competence profile to succeed in this role:

• A Bachelor’s degree within Information Security, Computer Science, IT, Law, Business, or a related field.
• Experience working with information security, cybersecurity, risk management and/or compliance.
• Experience with GDPR and information security governance, ISO 27001, NIS2, ISAE 3000, SOC reporting, or similar frameworks.
• Experience supporting audits, inspections, or compliance reviews.
• The ability to communicate complex security topics to both technical and non-technical audiences.
• Strong stakeholder management and collaboration skills.
• A proactive, self-driven, and structured working style.
• Relevant certifications such as ISO 27001, CISSP, CISM, CRISC, or similar are considered an advantage.

Why join IST?

At IST, you will become part of a company that has been developing digital solutions for the education sector for more than 40 years. We are approximately 400 employees across several countries, united by the ambition to create better opportunities for learning and education.

What we offer:

• A meaningful role with significant influence on the Group's security agenda.
• The opportunity to work across multiple countries, products, and business areas.
• A collaborative and supportive international environment.
• Professional and personal development opportunities.
• A strong culture characterized by trust, openness, and teamwork.

This is a full-time, permanent position. We apply an office-first policy and primarily work from the office to foster collaboration, innovation, and team spirit. If you live farther away, working from the office three days a week with the remaining time remote may be possible. In Scandinavia our offices are located in Stockholm, Växjö, Roskilde and Oslo.

Apply

Applications are reviewed continuously. For questions, contact Nanna Holm Thyboe, [phone] or email: [e-mail]. For questions about the recruitment process, contact [e-mail]. Please note that background check is part of the recruitment process.

Welcome to apply!