Information Security Officer

Nordnet Bank AB; Stockholms kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Job summary

Nordnet Bank AB in Stockholm seeks an Information Security Officer to shape and oversee our security posture across the organization. You will manage third-party risk, drive security projects, and build a robust security culture with clear communications to leadership and engineers.

The role requires 5+ years in information security, familiarity with ISO 27001 and NIST CSF 2.0, and experience in financial services. Hybrid work in Stockholm with on-call options to handle incidents.

Qualifications

• Five or more years in information security.
• Familiarity with ISO 27001 and NIST CSF 2.0.
• Experience in financial services or digital banking is a plus.

Responsibilities

• Shape and develop our security posture across the organization.
• Manage third-party risk end-to-end and embed security requirements in vendor contracts.
• Build security culture and awareness with engaging programs and communications.
• Lead security projects and collaborate cross-functionally to push goals forward.

Skills

Information security

ISO 27001

NIST CSF 2.0

DORA

CRA

Job description

30 years ago, Nordnet redefined the financial world as the first digital bank in Europe. Now we're doing it again, building the next generation of cloud-based banking. That takes the right people, the right team, and the right technology.

Want to help shape security at Nordnet?

We are Nordnet’s security team

We are Nordnet's central security function covering information security, IT security, secure development, incident response, and physical security. We believe security is solved together, not in silos, and that every team member brings their own expertise and takes ownership of the team's shared results. We also believe that working as a tight team allows us to have more fun at work!

As Information Security Officer, you'll have a broad mandate within information security at Nordnet. This includes:

• Shape and develop our security posture. Establish and enforce organizational security policies based on strategy, priorities, and legal/regulatory requirements like DORA and CRA.
• Manage third-party risk management end-to-end. Conduct security assessments and build clear security requirements into vendor contracts.
• Build security culture and awareness. Create impactful, engaging awareness programs and communications that make security second nature across the organization.
• Lead security projects. Drive key security initiatives and collaborate cross-functionally to push our goals forward.

You’ll report to the Head of Security. The Security Team includes operational Team Lead roles, and for the right person this could be a natural next step down the line, though it’s not a requirement to apply now. If you're up for it, there's also an option to join our on‑call rotation, covering a couple of weeks during the year as first responder for security incidents.

About You

You bring solid experience in information security, frameworks like ISO 27001 and NIST CSF 2.0 are second nature, and ideally you've also worked with DORA in practice, and potentially have started to work with CRA. Five or more years in the field is our starting point; a background in financial services and a technical foundation are a strong plus, since we're a digital bank.

You're as comfortable creating engaging security communications as you are digging into the fine print of a regulation. You can independently structure and drive your own area of responsibility, and you have the ability to talk security risk with both the leadership team and the engineers, pitched right for each audience.

You take a pragmatic approach to risk: the goal is an adequate level of security relative to the threat, not eliminating every conceivable risk. You know that good security work is built on collaboration and compromise, not solo effort.

You're fluent in written and spoken English. Swedish isn't required, but it's a plus.

About Us

We're building a world‑class customer experience with the ambition to become the first choice for savings and investments across the Nordics. You'll join a tight‑knit, driven team with a fast pace and real room to make an impact, part of an organization of 900+ employees across Stockholm, Oslo, Helsinki and Copenhagen.

We apply individual salary settings. The role is full time employment with a hybrid workplace based in Stockholm.

Learn more about us at www.nordnetab.com

Nordnet conducts credit and background checks as well as a drug test on the final candidate.