Information Security Manager Nordics

atNorth Holding AB; Stockholms kommun; On-site; SEK 700,000 - 900,000; Full time

Job summary

atNorth Holding AB seeks an Information Security Manager to drive the information security strategy and ensure compliance across all business units. This influential leadership role will involve working closely with executive leadership and various stakeholders to translate technical risks into business impact.

The ideal candidate will have expertise in ISO 27001 and experience with leading security governance initiatives. atNorth values a strong leadership presence and encourages an inclusive company culture.

Qualifications

• Proven ability to enforce information security across business units.
• Strong leadership presence to influence senior stakeholders.
• Demonstrated success in fostering a culture of security accountability.
• Ability to function at strategic and operational levels.
• Deep expertise in ISMS and security governance.
• Solid understanding of NIS2 and SOC 2 Type II regulations.

Responsibilities

• Define and execute information security strategy aligned with business goals.
• Act as advisor to executive leadership on security and compliance.
• Lead compliance programs like SOC 2 Type II and ISO 27001.
• Establish governance structures for control ownership.
• Ensure enterprise-wide security risks are actively managed.
• Lead incident response and post-incident corrective actions.
• Own and execute the Business Continuity Management framework.

Skills

Organizational change management

Leadership and influence

Information Security Management Systems (ISMS)

ISO 27001

Risk management

Business impact translation

Fluent English

Nordic languages

Job description

Information Security Manager at atNorth

As Information Security Manager, you will establish, lead, and enforce atNorth’s information security strategy and governance, ensuring the effective protection of information assets and full compliance with regulatory and certification requirements.

You will act as the senior authority on information security across atNorth, driving organizational accountability and ensuring that policies and controls are not only defined, but consistently followed across all business units. This is a highly influential leadership role with direct impact on business resilience, trust, and continued growth in a regulated and critical‑infrastructure environment.

You will work closely with executive leadership, regulators, auditors, and customers, translating technical risk into business impact and embedding information security as a core part of how atNorth operates.

Key responsibilities

• Define and execute atNorth’s information security strategy, aligned with business objectives and growth plans
• Act as senior authority and trusted advisor to executive leadership on information security, risk, threats, and compliance posture
• Own and lead key compliance and certification programs, including SOC 2 Type II, NIS2, and ISO/IEC 27001 (including continuous improvement)
• Establish and enforce governance structures that ensure clear control ownership and accountability across all departments
• Drive remediation of non‑compliance and elevate material risks or deviations to executive leadership when required
• Ensure enterprise‑wide information security risks are identified, prioritised, actively managed, and communicated in business‑relevant terms
• Lead incident response governance, executive communication, and post‑incident corrective actions
• Own and ensure the evolution and execution of the Business Continuity Management (BCM) framework
• Act as primary interface for information security auditors, regulators, and customers
• Lead and develop the information security team, setting clear direction, priorities, and accountability

Your profile

• Proven ability to drive organizational change and enforce information security requirements across multiple business units
• Strong leadership presence with the ability to challenge, influence, and hold senior stakeholders accountable
• Demonstrated success in building a culture of security accountability, not just awareness
• Ability to operate effectively at both strategic and operational levels
• Deep expertise in Information Security Management Systems (ISMS) and security governance
• Strong knowledge of ISO 27001, related standards (including ISO 22301), and security architecture principles
• Solid understanding of regulatory and certification environments, including NIS2 and SOC 2 Type II
• Ability to translate technical risks into business impact and decision‑making
• Fluent written and spoken English, any Nordic language is considered a merit
• Background check is conducted for all employees

About the atNorth Culture

We believe that sustainable success starts with the wellbeing of our people. For us, an open, transparent, and inclusive culture is more than a priority, it is the core of how we lead and innovate.

We don’t just talk about culture; we nurture it. Through regular one‑to‑one engagements and monthly wellbeing surveys, we listen carefully to our teams, ensuring that every voice is heard and every opportunity for improvement is embraced.

We recognize that innovation and collaboration thrive where people feel truly connected, which is why we come together each week to share ideas, strengthen relationships, and nurture a sense of belonging, sometimes over a simple breakfast and good conversation.

At atNorth, we are building a community where you can do your best work and shape a sustainable future together.