Information Security Officer

Nordnet AB; Stockholms kommun; Hybrid; SEK 900,000 - 1,150,000; Full time

Job summary

Nordnet AB in Stockholm is seeking an Information Security Officer to shape and lead our information security program in a hybrid, full-time role. You will drive security posture, risk management, and security communications to executives and engineers in a digital bank environment.

The role requires 5+ years in information security, familiarity with ISO 27001, NIST CSF 2.0, and knowledge of DORA/CRA. Swedish language not required but welcome.

Qualifications

• Five or more years in information security.
• Experience with ISO 27001 and NIST CSF 2.0.
• Familiarity with DORA and CRA.
• Background in financial services is a plus.
• Ability to communicate security concepts to leadership and engineers.

Responsibilities

• Shape and develop our security posture. Establish and enforce organizational security policies.
• Manage third-party risk management end-to-end.
• Build security culture and awareness.
• Lead security projects and drive cross-functional collaboration.

Skills

Information security

Risk management

Security communications

Cross-functional collaboration

ISO 27001

NIST CSF 2.0

DORA experience

CRA experience

Job description

30 years ago, Nordnet redefined the financial world as the first digital bank in Europe. Now we're doing it again, building the next generation of cloud-based banking. That takes the right people, the right team, and the right technology.

Want to help shape security at Nordnet?

We are Nordnet's security team

We are Nordnet's central security function covering information security, IT security, secure development, incident response, and physical security. We believe security is solved together, not in silos, and that every team member brings their own expertise and takes ownership of the team's shared results. We also believe that working as a tight team allows us to have more fun at work! As Information Security Officer, you'll have a broad mandate within information security at Nordnet. This includes:

• Shape and develop our security posture. Establish and enforce organizational security policies based on strategy, priorities, and legal/regulatory requirements like DORA and CRA.
• Manage third-party risk management end-to-end. Conduct security assessments and build clear security requirements into vendor contracts.
• Build security culture and awareness. Create impactful, engaging awareness programs and communications that make security second nature across the organization.
• Lead security projects. Drive key security initiatives and collaborate cross-functionally to push our goals forward.

You’ll report to the Head of Security. The Security Team includes operational Team Lead roles, and for the right person this could be a natural next step down the line, though it's not a requirement to apply now. If you're up for it, there's also an option to join our on‑call rotation, covering a couple of weeks during the year as first responder for security incidents.

About you

You bring solid experience in information security, frameworks like ISO 27001 and NIST CSF 2.0 are second nature, and ideally you've also worked with DORA in practice, and potentially have started to work with CRA. Five or more years in the field is our starting point; a background in financial services and a technical foundation are a strong plus, since we're a digital bank.

You're as comfortable creating engaging security communications as you are digging into the fine print of a regulation. You can independently structure and drive your own area of responsibility, and you have the ability to talk security risk with both the leadership team and the engineers, pitched right for each audience.

You take a pragmatic approach to risk: the goal is an adequate level of security relative to the threat, not eliminating every conceivable risk. You know that good security work is built on collaboration and compromise, not solo effort.

You're fluent in written and spoken English. Swedish isn't required, but it's a plus.

About us

We're building a world‑class customer experience with the ambition to become the first choice for savings and investments across the Nordics. You'll join a tight‑knit, driven team with a fast pace and real room to make an impact, part of an organization of 900+ employees across Stockholm, Oslo, Helsinki and Copenhagen.

We apply individual salary settings. The role is full time employment with a hybrid workplace based in Stockholm.

Learn more about us at www.nordnetab.com

Questions & applications

Questions about the role? Contact Talent Acquisition Partner Lovisa Malmberg, [e-mail], [phone].

Nordnet conducts credit and background checks as well as a drug test on the final candidate.