Information Security Manager

Brite AB; Stockholms kommun; Hybrid; SEK 800,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid workplace

Career impact

Inclusive culture

Fast-paced environment

Professional development

Job summary

Brite Payments, headquartered in Stockholm, is seeking an Information Security Manager to join our CISO-led security program and strengthen our ISMS and ICT risk framework across the organization. You will lead governance efforts, drive third-party risk management, security awareness, and policy development, while collaborating with cyber security professionals to protect millions of users across Europe.

Fluency in English is required, and experience with ISO 27001, NIST, and DORA is highly

Qualifications

• 3–5 years of experience in a similar information security role.
• Knowledge of ISO 27001 and NIST security frameworks.
• Experience with DORA Regulation EU 2022:2554.
• Relevant IT/information security educational background.
• Fluent in English in a corporate setting.

Responsibilities

• Develop, strengthen and drive the information security governance within the organisation.
• Oversee third‑party risk management and vendor due diligence procedures.
• Coordinate security initiatives and drive the security awareness program.
• Provide classification and criticality guidance across information security domains.
• Support governance, risk and compliance (GRC) activities and client security inquiries.
• Ensure policies and procedures are documented, communicated and updated.

Skills

ISO 27001

NIST

Information security

Leadership

Communication

English fluency

Education

Relevant educational background in IT/information security

Job description

About Brite Payments

Headquartered in Stockholm since 2019, Brite Payments is a fintech that operates across 27 European markets and harnesses open banking to enable instant bank payments (also known as Pay by Bank) between consumers and merchants.

What We’re Looking For

As an Information Security Manager (ISM) at Brite, you will work with our Chief Information Security Officer (CISO) and cyber security professionals to further develop and strengthen our information security management system (ISMS) and ICT risk framework. The ISM will play a key role in the governance of information security within the organisation, with responsibilities spanning areas such as third party risk management, coordination of security initiatives, security awareness, and more.

Are you a Brite mind? We are looking for individuals with a passion for driving change and solving problems. We are an organisation of builders and innovators, pioneering the second generation of instant payments. At Brite, you get to shape the future of a product that simplifies commerce for millions across Europe.

The ideal candidate has a background in the information security field and has worked in a similar role within the EU financial sector. Brite operates in a regulated business, meaning knowledge and experience of DORA requirements and implementation procedures is important.

The ISM will be responsible for the governance leg of the information security organisation, meaning pro-activeness and a forward-leaning attitude is expected, along with good leadership and communication skills.

Experience

• Ideally 3-5 years of experience working in a similar role
• Knowledge and experience of information security industry standards and frameworks such as ISO 27001 and NIST
• Previous experience working with DORA Regulation EU 2022:2554
• Relevant educational background in IT/information security
• Fluent in English, as this is the corporate language.

What You Will Do

The ISM will be responsible for further developing, strengthening and driving the information security governance within the organisation. As part of this, you will:

• Drive the information security vendor due diligence procedures within the third party risk management framework.
• Drive and coordinate information security initiatives in line with the information security management system (ISMS).
• Drive the security awareness, communication and training program.
• Provide information classification and criticality analysis guidance.
• Provide guidance within multiple information security domains such as staff-, travel-, and physical security.
• Support with governance, risk and compliance (GRC) related activities.
• Support with security-related requests and questions from clients.
• Ensure relevant information security policies and procedures are documented, communicated and updated.
• Continuously evaluate and improve our security governance capabilities.

Our Benefits

• A dynamic, fast-paced and innovative environment, with the chance to join one of Europe’s hottest fintechs and learn from industry leaders.
• Be part of a team of fun, skilled professionals who are committed to making a lasting impact and always have a “can do” attitude.
• The opportunity to make an impact from day one in an organisation that values quick decision‑making, teamwork and results.
• An optimistic, caring, and inclusive culture where we want you to be yourself.
• Flexible working opportunities with a hybrid workplace policy.

We are committed to building a highly inclusive and accessible workplace. We actively welcome and encourage applications from candidates of all backgrounds, physical abilities, and working styles.

We offer a fast‑paced, ego‑free environment where you can make a real impact from day one. You’ll find a flat organisation driven by fast decision‑making, where we start small, learn fast, and do big things together. Above all, you’ll be part of a skilled, inclusive team that values true collaboration over corporate hierarchy.

Do you want to learn more about our recruitment process? Here you can read about the hiring flow and find answers to the most frequently asked questions.