Information Security Officer

Northmill Bank; Sweden; On-site; SEK 600,000 - 800,000; Full time

Benefits offered by this job

5,000 kr health care allowance

Conference abroad every other year

Breakfast and fruits daily

Regular after-work events

Job summary

Northmill Bank seeks an Information Security Officer to modernize their security framework and align with ISO 27001. You will translate security requirements into practical strategies and ensure compliance with regulations like GDPR and PCI-DSS.

Located in Stockholm, the role involves leading security initiatives and advising on incidents. The perfect candidate has experience in this field, a pragmatic mindset, and proficiency in Swedish and English.

Join us for a role with real impact and great professional development opportunities.

Qualifications

• Hands-on experience as an Information Security Officer or in a similar role.
• Strong understanding of regulatory requirements versus business needs.
• Experience developing security frameworks.

Responsibilities

• Translate information security requirements into policies and procedures.
• Monitor compliance with internal and external regulations.
• Lead and participate in risk assessments and analysis.

Skills

Information Security policies development

Compliance monitoring

Risk management

Problem-solving skills

Collaboration

Professional proficiency in Swedish

Professional proficiency in English

Education

Certifications such as CISM or ISO 27001 Lead Implementer

Job description

About the role

The Information Security Officer is a subject‑matter expert, member of the Information Security team in the second line of defense. The team is tasked to provide governance, oversight and guidance by writing policies for the ICT functions, monitoring and controlling the first line’s compliance against these policies, and delivering security capabilities such as technical security scanners and training activities. Although the team’s primary responsibility is governance, this small bank also requires a hands‑on role in driving security initiatives, designing procedures, and building security capabilities. The officer will directly influence the secure design of systems, support risk management, and respond to security incidents.

As the Information Security Officer you will have a blank canvas to modernize our security framework, moving us from legacy documentation to a lean, ISO 27001‑aligned ‘Version 2.0’. This is a rare opportunity to use your experience to shape the bank’s ways of working, risk appetite, and long‑term security posture.

What you will do

• Translate information security requirements into practical, effective, and business‑aligned policies, procedures, guidelines or strategies.
• Monitor compliance for our internal information security rules and our applicable business and regulatory requirements, including DORA, GDPR, PSD2, FFFS, Visa, Swift, Swish, Bankgirot, Rixbanken, etc.
• Structure information security requirements in the ISMS in alignment with the ISO 27001 standard.
• Act as an advisor and lead for information, cyber security, or privacy incidents.
• Serve as a subject‑matter expert within privacy and data protection.
• Act as subject‑matter expert in relation to our PCI‑DSS certification and conduct readiness assessments; ensure recurring tasks are performed as needed.
• Contribute to reporting towards supervisory authorities (e.g., SFSA, IMY, FIN‑FSA).
• Ensure that the organization has relevant security awareness and training in place.
• Lead and participate in Business Impact Analysis, ICT vendor approval, the Register of Information, Critical and Important functions, ICT risk assessments, Data Protection Impact Assessments, IA‑act risk assessments, NPAP, and various GAP analyses.

What we are looking for

• Experience working as an Information Security Officer or in a similar role.
• Hands‑on experience in developing policies, procedures, and security frameworks.
• A pragmatic mindset and a strong understanding of how to balance regulatory requirements with business needs.
• Strong problem‑solving skills and the ability to operate in a dynamic environment.
• A collaborative approach and willingness to work closely with different parts of the organization.
• Professional proficiency in both Swedish and English (Finnish or German is a plus).
• Based in Stockholm, with EU/EEA residency or citizenship.

Certifications such as CISM or ISO 27001 Lead Implementer are meritorious, but not required.

What we offer

• A fantastic office in a prime Stockholm location with great spaces and views.
• An independent role with the opportunity to make a real impact.
• Great opportunities for professional development.
• Health – 5 000 kr health care allowance.
• Conference abroad every other year.
• Breakfast and fruits every day, as well as a “holy fika” each Friday.
• Regular after‑work events and celebrated successes at the office.

Department Risk Locations Stockholm