Information Security Officer: Lead Cyber Resilience

Truesec Group; Stockholms kommun; Presencial; SEK 700.000 - 1.000.000; Jornada completa

Descripción de la vacante

Truesec Group is seeking an Information Security Officer to join its Global Security & Compliance team. You will work with the CISO to align security goals with the threat landscape and govern security initiatives across the organization.

You will collaborate with Soc, IR, Protective Security, and Legal teams, manage risk, perform audits, and drive improvements in cloud security, identity management, vulnerability management, and detection and response. Fluency in Swedish and English is required.

Formación

• Strong communication and stakeholder management across business units.
• Experience with implementing and governing an Information Management System.
• Familiarity with security frameworks such as NIST, CIS 18, ISO 27001, SOC2 and PCI DSS.
• Proficiency in conducting security audits and assessments.
• Proficiency in risk management and reporting.

Responsabilidades

• Support the business on security, privacy, and interpretation of requirements.
• Communicate with stakeholders and respond to security requirements in RFPs and questionnaires.
• Coordinate incident management, monitoring and security measures with SOC and IT SecOps teams.
• Collaborate with AI initiatives to improve GSC processes.
• Perform yearly internal ISO 27001 audits and participate in external audits.
• Monitor regulatory changes with Internal Legal and update governing documents.

Conocimientos

Strong communication

Stakeholder management

Security governance

Audits and assessments

Risk management

Security architecture

Swedish & English

Herramientas

NIST framework

CIS 18

ISO 27001

SOC2

PCI DSS

Descripción del empleo

Truesec Group is seeking an Information Security Officer to join its Global Security & Compliance team. You will work with the CISO to align security goals with the threat landscape and govern security initiatives across the organization.

You will collaborate with Soc, IR, Protective Security, and Legal teams, manage risk, perform audits, and drive improvements in cloud security, identity management, vulnerability management, and detection and response. Fluency in Swedish and English is required.