Information Security Manager

Brite Payments; Stockholms kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid workplace policy

Dynamic fintech environment

Inclusive culture

Team learning and collaboration

Job summary

Brite Payments in Stockholm seeks an Information Security Manager to advance the ISMS and ICT risk framework. You will collaborate with the CISO and cyber security team to govern information security, drive vendor risk management, and lead security initiatives across the organisation.

The ideal candidate has EU financial sector experience, knowledge of DORA, and strong leadership and communication skills, with English as the corporate language.

Qualifications

• 3–5 years in a similar information security role.
• Familiar with ISO 27001 and NIST frameworks.
• Experience with DORA Regulation EU 2022:2554.
• Educational background in IT/information security.
• Fluent English for corporate communication.

Responsibilities

• Develop and strengthen ISMS governance across the organisation.
• Lead third-party due diligence within vendor risk management.
• Coordinate security initiatives and awareness programs.
• Provide guidance on information classification and criticality.
• Support GRC activities and client security inquiries.
• Maintain and update information security policies and procedures.
• Improve security governance capabilities continuously.
• Collaborate with CISO and cyber security team on projects.

Skills

Information security

ISO 27001

NIST

DORA EU 2022:2554

English fluency

Vendor risk management

Education

IT / information security degree

Job description

About Brite Payments

Headquartered in Stockholm since 2019, Brite Payments is a fintech that operates across 27 European markets and harnesses open banking to enable instant bank payments (also known as Pay by Bank) between consumers and merchants.

What We’re Looking For

As an Information Security Manager (ISM) at Brite, you will work with our Chief Information Security Officer (CISO) and cyber security professionals to further develop and strengthen our information security management system (ISMS) and ICT risk framework. The ISM will play a key role in the governance of information security within the organisation, with responsibilities spanning areas such as third party risk management, coordination of security initiatives, security awareness, and more.

We are looking for individuals with a passion for driving change and solving problems. We are an organisation of builders and innovators, pioneering the second generation of instant payments. At Brite, you get to shape the future of a product that simplifies commerce for millions across Europe.

The ideal candidate has a background in the information security field and has worked in a similar role within the EU financial sector. Brite operates in a regulated business, meaning knowledge and experience of DORA requirements and implementation procedures is important.

The ISM will be responsible for the governance leg of the information security organisation, meaning pro-activeness and a forward-leaning attitude is expected, along with good leadership and communication skills.

Experience

• Ideally 3-5 years of experience working in a similar role
• Knowledge and experience of information security industry standards and frameworks such as ISO 27001 and NIST
• Previous experience working with DORA Regulation EU 2022:2554
• Relevant educational background in IT/information security
• Fluent in English, as this is the corporate language.

What You Will Do

The ISM will be responsible for further developing, strengthening and driving the information security governance within the organisation. As part of this, you will:

• Drive the information security vendor due diligence procedures within the third party risk management framework.
• Drive and coordinate information security initiatives in line with the information security management system (ISMS).
• Drive the security awareness, communication and training program.
• Provide information classification and criticality analysis guidance.
• Provide guidance within multiple information security domains such as staff-, travel-, and physical security.
• Support with governance, risk and compliance (GRC) related activities.
• Support with security-related requests and questions from clients.
• Ensure relevant information security policies and procedures are documented, communicated and updated.
• Continuously evaluate and improve our security governance capabilities.

Our Benefits

• A dynamic, fast-paced and innovative environment, with the chance to join one of Europe’s hottest fintechs and learn from industry leaders.
• Be part of a team of fun, skilled professionals who are committed to making a lasting impact and always have a “can do” attitude.
• The opportunity to make an impact from day one in an organisation that values quick decision‑making, teamwork and results.
• An optimistic, caring, and inclusive culture where we want you to be yourself.
• Flexible working opportunities with a hybrid workplace policy.

We offer a fast-paced, ego-free environment where you can make a real impact from day one. You’ll find a flat organisation driven by fast decision-making, where we start small, learn fast, and do big things together. Above all, you’ll be part of a skilled, inclusive team that values true collaboration over corporate hierarchy.

We are committed to building a highly inclusive and accessible workplace. We actively welcome and encourage applications from candidates of all backgrounds, physical abilities, and working styles.