Information Security Manager – ISMS & GRC Leader in Fintech

Brite AB; Stockholms kommun; Híbrido; SEK 800 000 - 1 200 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid workplace

Career impact

Inclusive culture

Fast-paced environment

Professional development

Resumo da oferta

Brite Payments, headquartered in Stockholm, is seeking an Information Security Manager to join our CISO-led security program and strengthen our ISMS and ICT risk framework across the organization. You will lead governance efforts, drive third-party risk management, security awareness, and policy development, while collaborating with cyber security professionals to protect millions of users across Europe.

Fluency in English is required, and experience with ISO 27001, NIST, and DORA is highly

Qualificações

• 3–5 years of experience in a similar information security role.
• Knowledge of ISO 27001 and NIST security frameworks.
• Experience with DORA Regulation EU 2022:2554.
• Relevant IT/information security educational background.
• Fluent in English in a corporate setting.

Responsabilidades

• Develop, strengthen and drive the information security governance within the organisation.
• Oversee third‑party risk management and vendor due diligence procedures.
• Coordinate security initiatives and drive the security awareness program.
• Provide classification and criticality guidance across information security domains.
• Support governance, risk and compliance (GRC) activities and client security inquiries.
• Ensure policies and procedures are documented, communicated and updated.

Conhecimentos

ISO 27001

NIST

Information security

Leadership

Communication

English fluency

Formação académica

Relevant educational background in IT/information security

Descrição da oferta de emprego

Brite Payments, headquartered in Stockholm, is seeking an Information Security Manager to join our CISO-led security program and strengthen our ISMS and ICT risk framework across the organization. You will lead governance efforts, drive third-party risk management, security awareness, and policy development, while collaborating with cyber security professionals to protect millions of users across Europe.

Fluency in English is required, and experience with ISO 27001, NIST, and DORA is highly