Information Security Officer

Truesec Group; Stockholms kommun; On-site; SEK 700,000 - 1,000,000; Full time

Job summary

Truesec Group is seeking an Information Security Officer to join its Global Security & Compliance team. You will work with the CISO to align security goals with the threat landscape and govern security initiatives across the organization.

You will collaborate with Soc, IR, Protective Security, and Legal teams, manage risk, perform audits, and drive improvements in cloud security, identity management, vulnerability management, and detection and response. Fluency in Swedish and English is required.

Qualifications

• Strong communication and stakeholder management across business units.
• Experience with implementing and governing an Information Management System.
• Familiarity with security frameworks such as NIST, CIS 18, ISO 27001, SOC2 and PCI DSS.
• Proficiency in conducting security audits and assessments.
• Proficiency in risk management and reporting.

Responsibilities

• Support the business on security, privacy, and interpretation of requirements.
• Communicate with stakeholders and respond to security requirements in RFPs and questionnaires.
• Coordinate incident management, monitoring and security measures with SOC and IT SecOps teams.
• Collaborate with AI initiatives to improve GSC processes.
• Perform yearly internal ISO 27001 audits and participate in external audits.
• Monitor regulatory changes with Internal Legal and update governing documents.

Skills

Strong communication

Stakeholder management

Security governance

Audits and assessments

Risk management

Security architecture

Swedish & English

Tools

NIST framework

CIS 18

ISO 27001

SOC2

PCI DSS

Job description

Do you want to be at the forefront of protecting our society against cyber threats? We are looking for an Information Security Officer to team up with the most dedicated team of cyber specialists.

About Truesec – A Leading Cybersecurity Company

Since 2005, Truesec has been a native cybersecurity company, driven by one single purpose: Creating safety and sustainability in a digital world by preventing cyber breach and minimizing impact.

Over the years, we’ve earned the trust of organizations worldwide and gained a strong reputation internationally. Our team consists of dedicated specialists covering the entire spectrum of cybersecurity – with capabilities in Predict, Prevent, Protect, Respond, and Recover.

Today, we employ around 400 employees – and as cybercrime grows, we need to grow. To support that goal, we are now looking for an Information Security Officer who wants to make a difference.

Global Security & Compliance team

The Global Security and Compliance (GSC) function at Truesec plays a pivotal role in ensuring that Truesec’s cyber resilience is adapted to our threat profile and remains aligned with the evolving technology landscape, including AI. As a leading Nordic cyber security provider, Truesec is held to the highest standards, and it is the responsibility of the GSC function to ensure that industry best practices and information security and compliance standards are consistently upheld in the organization.

The Role

You will work closely with the CISO to ensure our security goals and activities align with the threat landscape and that our cyber strategies are effectively implemented and continuously improved. This entails:

• Supporting the business on security, privacy, and the interpretation of requirements. In a dynamic technology environment, GSC works closely with teams across Truesec to support internal initiatives, such as proof-of-concepts for new security technologies.
• Communication with stakeholders, including responding to security requirements in RFPs and questionnaires.
• Coordinate incident management, monitoring and security measures with our SOC and IT SecOps team
• Working with AI to improve the GSC processes and empower the organization in decision making.
• Performing yearly internal audits according to the ISO 27001 standard and participating in the external ISO audits.
• Risk management including working with Truesec Intelligence to assess risk profile. You will work closely with leading experts in various fields, including our SOC, IR, Protective Security Manager, Human Threat Intelligence, Threat Intelligence.
• Monitor changes in the statutory and regulatory landscape in cooperation with Internal Legal, ensuring that our governing documents remain up to date and aligned with applicable legal, regulatory, and contractual requirements.

Your Potential Background

You bring solid experience from IT or information security, gained in a consulting, audit or line role, together with a broad and current understanding of the cyber threat landscape. You can assess how emerging threats may affect the organisation and translate them into clear priorities, proportionate controls and practical improvements.

You understand modern security architectures and technologies, including cloud security, identity and access management, vulnerability management, and detection and response, and can confidently challenge technical teams, suppliers and proposed solutions.

Required Skills:

• Strong communication and stakeholder management skills
• Experience with implementing and governing an Information Management System
• Familiarity with security frameworks such as NIST, CIS 18, ISO 27001, SOC2, and PCI DSS. Our ITSM is certified according to ISO 27001.
• Proficiency in conducting security audits and assessments
• Proficiency in risk management
• Strong analytical and report-writing skills
• Proficient in Swedish & English, both written and spoken.

Bonus Skills:

• Relevant certifications such as CISSP, MCSE CIPP/E
• Experience from implementing ISO 27001 in an organization
• Legal graduate/legal experience
• Knowledge of legislation such as GDPR, NIS directive and the Protective Security Act
• Experience with incident response, continuity- and crisis management

Due to the sensitivity of our work, we require Swedish citizenship, citizenship in an EU country, or a Swedish work permit.

Join Our Mission Toward a Safe Digital Future

If you truly want to make a difference and make our world a little bit safer, this is the place for you. At Truesec, you’ll get to be at the forefront of fighting cybercrime instead of reading about it in the news. This is your chance to be part of an exciting journey in a leading cybersecurity company – and learn from some of the best in their field.

So, are you ready to team up with the most dedicated team of experts and be part of a meaningful mission? Then we are excited to get to know you!