Information Security Officer

Truesec; Stockholms kommun; On-site; SEK 800,000 - 1,100,000; Full time

Job summary

Truesec is seeking an Information Security Officer to join the Global Security & Compliance team in Sweden. You will report to the CISO and help align security initiatives with evolving threats and regulatory requirements.

You will work with AI to enhance GSC processes, coordinate audits, and drive risk management across security domains, including cloud, IAM, and vulnerability management. Fluency in Swedish and English is required.

Qualifications

• Solid IT or information security experience from consulting, audit or line roles.
• Broad understanding of the cyber threat landscape and ability to translate threats into priorities and controls.
• Knowledge of modern security architectures, including cloud security, IAM, vulnerability management, detection and response.
• Ability to challenge technical teams, suppliers and proposed security solutions.

Responsibilities

• Align security goals with the threat landscape and continuously improve cyber strategies.
• Support the business on security and privacy requirements, including RFP responses and questionnaires.
• Coordinate incident management, monitoring and security measures with the SOC and IT SecOps team.
• Collaborate with AI initiatives to improve GSC processes and decision making.
• Perform yearly internal audits per ISO 27001 and participate in external ISO audits.
• Manage risk with Truesec Intelligence and work with SOC, IR, Protective Security Manager, and Threat Intelligence teams.
• Monitor regulatory landscape in cooperation with Internal Legal to stay compliant.

Skills

Communication skills

Stakeholder management

Security audits & assessments

Risk management

Swedish & English proficiency

Education

CISSP or equivalent

ISO 27001 implementation experience

GDPR knowledge / legal understanding

Tools

ISO 27001

NIST

SOC2

PCI DSS

Job description

Do you want to be at the forefront of protecting our society against cyber threats? We are looking for an Information Security Officer to team up with the most dedicated team of cyber specialists.

About Truesec – A Leading Cybersecurity Company

Since 2005, Truesec has been a native cybersecurity company, driven by one single purpose: Creating safety and sustainability in a digital world by preventing cyber breach and minimizing impact.

Over the years, we’ve earned the trust of organizations worldwide and gained a strong reputation internationally. Our team consists of dedicated specialists covering the entire spectrum of cybersecurity – with capabilities in Predict, Prevent, Protect, Respond, and Recover.

Today, we employ around 400 employees – and as cybercrime grows, we need to grow. To support that goal, we are now looking for an Information Security Officer who wants to make a difference.

Global Security & Compliance team

The Global Security and Compliance (GSC) function at Truesec plays a pivotal role in ensuring that Truesec’s cyber resilience is adapted to our threat profile and remains aligned with the evolving technology landscape, including AI. As a leading Nordic cyber security provider, Truesec is held to the highest standards, and it is the responsibility of the GSC function to ensure that industry best practices and information security and compliance standards are consistently upheld in the organization.

The Role

You will work closely with the CISO to ensure our security goals and activities align with the threat landscape and that our cyber strategies are effectively implemented and continuously improved. This entails:

• Supporting the business on security, privacy, and the interpretation of requirements. In a dynamic technology environment, GSC works closely with teams across Truesec to support internal initiatives, such as proof-of-concepts for new security technologies.
• Communication with stakeholders, including responding to security requirements in RFPs and questionnaires.
• Coordinate incident management, monitoring and security measures with our SOC and IT SecOps team
• Working with AI to improve the GSC processes and empower the organization in decision making.
• Performing yearly internal audits according to the ISO 27001 standard and participating in the external ISO audits.
• Risk management including working with Truesec Intelligence to assess risk profile. You will work closely with leading experts in various fields, including our SOC, IR, Protective Security Manager, Human Threat Intelligence, Threat Intelligence.
• Monitor changes in the statutory and regulatory landscape in cooperation with Internal Legal, ensuring that our governing documents remain up to date and aligned with applicable legal, regulatory, and contractual requirements.

Your Potential Background

You bring solid experience from IT or information security, gained in a consulting, audit or line role, together with a broad and current understanding of the cyber threat landscape. You can assess how emerging threats may affect the organisation and translate them into clear priorities, proportionate controls and practical improvements.

You understand modern security architectures and technologies, including cloud security, identity and access management, vulnerability management, and detection and response, and can confidently challenge technical teams, suppliers and proposed solutions.

Required Skills:

• Strong communication and stakeholder management skills
• Experience with implementing and governing an Information Management System
• Familiarity with security frameworks such as NIST, CIS 18, ISO 27001, SOC2, and PCI DSS. Our ITSM is certified according to ISO 27001.
• Proficiency in conducting security audits and assessments
• Proficiency in risk management
• Strong analytical and report-writing skills
• Proficient in Swedish & English, both written and spoken.

Bonus Skills:

• Relevant certifications such as CISSP, MCSE CIPP/E
• Experience from implementing ISO 27001 in an organization
• Legal graduate/legal experience
• Knowledge of legislation such as GDPR, NIS directive and the Protective Security Act
• Experience with incident response, continuity- and crisis management

Due to the sensitivity of our work, we require Swedish citizenship, citizenship in an EU country, or a Swedish work permit.

Join Our Mission Toward a Safe Digital Future

If you truly want to make a difference and make our world a little bit safer, this is the place for you. At Truesec, you'll get to be at the forefront of fighting cybercrime instead of reading about it in the news. This is your chance to be part of an exciting journey in a leading cybersecurity company - and learn from some of the best in their field.

So, are you ready to team up with the most dedicated team of experts and be part of a meaningful mission? Then we are excited to get to know you!