Information Security Specialist

Tacton; Stockholms kommun; Hybrid; SEK 900,000 - 1,300,000; Full time

Benefits offered by this job

Flexible hybrid setup

33 days paid time off

Premium pension

Wellness allowance

Private healthcare

Parental leave top-up

Weekly treats

Job summary

Tacton is seeking a hands-on security specialist to safeguard our internal digital landscape across systems, integrations, cloud environments, data flows, and vendor ecosystems. You will report to the CISO office and combine security architecture thinking with practical execution in threat modelling, risk assessments, and governance.

This high‑impact, cross‑functional role partners with IT, Engineering and Legal to act as the internal security expert for stakeholders, guide AI risk management,

Qualifications

• 5+ years in cybersecurity, information security, IT risk, or security architecture.
• Hands-on experience with threat modelling, risk assessments, and vendor security reviews.
• Strong technical foundation in cloud, networking, identity & access management, and system integrations.
• Familiarity with ISO 27001 and SOC 2 Type II.
• Awareness of AI security risks and how AI adoption changes the compliance and threat landscape.
• Strong communication and stakeholder management skills.

Responsibilities

• Lead security assessments of systems, integrations, and data flows.
• Conduct technical risk analyses for system implementations and vendor onboarding.
• Perform threat modelling and security architecture reviews.
• Define and implement security requirements for infrastructure and cloud environments.
• Assess and manage third-party and supplier security risks.
• Evaluate and manage security risks related to AI systems and AI-integrated products.
• Maintain alignment with ISO 27001 and SOC 2 Type II; contribute to policies, standards, and guidelines.
• Support incident investigations and act as a subject-matter expert in audits.
• Help establish security guardrails across identity, access, encryption, and integrations.

Skills

Threat modelling

Risk assessments

Vendor security reviews

Cloud security

Networking

Identity & Access Management

System integrations

ISO 27001

SOC 2 Type II

AI security

Stakeholder management

CISSP

CISM

CISA

Education

Bachelor's degree in Computer Science, Engineering, or related field

Job description

About The Role

You will be the hands‑on security specialist responsible for keeping our internal digital landscape secure — across systems, integrations, cloud environments, data flows, and our vendor ecosystem. This role reports into the CISO office, directly to the CISO & Compliance Manager.

You will combine security architecture thinking with practical execution: threat modeling, technical risk assessments, vendor due diligence, and governance work. You will partner closely with IT, Engineering, and Legal, acting as the internal security expert stakeholders turn to. You will also play a key role in how we secure our growing use of AI — an area that brings both significant opportunity and significant risk.

This is a high‑impact, cross‑functional role for someone energized by the full breadth of security work — from technical assessments to policy and standards.

What You Will Do

• Lead security assessments of systems, integrations, and data flows.
• Conduct technical risk analyses for system implementations and vendor onboarding.
• Perform threat modelling and security architecture reviews.
• Define and implement security requirements for infrastructure and cloud environments.
• Assess and manage third‑party and supplier security risks.
• Evaluate and manage security risks related to AI systems and AI‑integrated products.
• Maintain alignment with ISO 27001 and SOC 2 Type II; contribute to policies, standards, and guidelines.
• Support incident investigations and act as a subject‑matter expert in audits.
• Help establish security guardrails across identity, access, encryption, and integrations.

What Will Help You Thrive

• 5+ years in cybersecurity, information security, IT risk, or security architecture.
• Hands‑on experience with threat modelling, risk assessments, and vendor security reviews.
• Strong technical foundation in cloud, networking, identity & access management, and system integrations.
• Familiarity with ISO 27001 and SOC 2 Type II.
• Awareness of AI security risks and how AI adoption changes the compliance and threat landscape.
• Strong communication and stakeholder management skills — you work across IT, Engineering, and Legal.
• Certifications such as CISSP, CISM, or CISA are a plus.
• Degree in Computer Science, Engineering, or a related field.

Who We’re Looking For

You combine technical rigor with genuine people skills — comfortable owning a threat model one day and a policy document the next. You are pragmatic, hands‑on, and motivated by outcomes. You communicate clearly across audiences, thrive with broad responsibilities, and are proactive about improving both yourself and the way things are done.

What To Expect During The Recruitment Process

• Screening call with Global Talent Acquisition Partner.
• First interview with our Hiring Manager.
• Personality and logic‑ability test.
• Second interview with AI specialist peers.
• Third interview & assignment.
• Final interview with senior management.
• Reference and background checks.

Why Tacton?

• At Tacton, we’ve been building CPQ software for over 20 years. We’re a stable company with global customers and a product that’s central to how manufacturers sell.
• We offer competitive benefits, flexibility in how we work, and a culture that values learning and collaboration.
• A solid and stable company with over 20 years of industry experience.
• Flexible hybrid setup – 3x a week at the office.
• 33 days of paid time off – 30 vacation days plus 3 extra to give you the rest you deserve.
• Premium occupational pension – our pension plan goes beyond ITP1, with higher employer contributions depending on your age and salary level.
• Generous wellness allowance – 5,000 SEK annually to support your health and wellbeing.
• Private healthcare insurance – skip the waiting lines and get quick access to private medical care, including specialist consultations and treatments.
• Parental leave top‑up – we top up your parental leave so you receive up to 90% of your base salary for up to 6 months, helping you focus on your family without financial stress.
• Weekly treats – fika one week, breakfast the next, because good food brings people together.

Tacton is a global leader in software for manufacturers of complex, highly configurable products. We deliver a Buyer‑Centric Smart Factory that connects buyer engagement, engineering, and order fulfillment through a single source of truth.