Information Security Specialist

Einride; Stockholms kommun; On-site; SEK 45,000 - 65,000; Full time

Job summary

Einride is looking for a candidate to enhance and expand their Information Security Management System (ISMS) and handle security compliance processes. This full-time role based in Stockholm requires someone with experience in cyber security and security compliance standards.

The chosen candidate will work on maintaining ISO27001 certification and improving risk assessment processes while communicating effectively with stakeholders across the organization.

Qualifications

• 0-3 years of experience in cyber security, with knowledge of compliance standards.
• Experience with cloud corporate environments and applications.
• Ability to communicate security principles clearly to various audiences.

Responsibilities

• Improve and expand Einride's ISMS including security policies and procedures.
• Drive business continuity assessments and risk ownership across the organization.
• Maintain and prepare for ISO27001 certification and future ones.

Skills

Cyber security knowledge

Security compliance standards (ISO27001, PCI-DSS, SOC2)

Experience with cloud environments (AWS, GCP, Azure)

Risk assessment skills

Job description

You will:

• Improve and expand Einride's ISMS (i.e., security policies, guidelines & procedures)
• Perform, improve and expand the information security processes and procedures (e.g., risk assessments (incl 3rd party), access reviews, awareness training, etc)
• Continuously improve our Information Security Compliance program by utilizing our Security Governance, Risk and Compliance platform and AI in order to enhance the visibility of and automate as many of the processes as possible
• Drive business continuity assessments, process and controls that reduce risk for the organization and instill a sense of risk ownership to relevant stakeholders
• Maintain the organization’s ISO27001 certification and prepare it for additional ones in the future (e.g., SOC2 Type I & Type II)

We expect you to:

• 0-3 years of working experience in cyber security, preferably with security compliance standards (ISO27001, PCI-DSS, SOC2, etc)
• Experience in information security processes that work well for cloud corporate environments & applications (e.g., Google Workspace, Office365) and public cloud infrastructure (AWS, GCP, Azure, etc)
• Ability to explain security principles and procedures to a diverse audience in a way that allows them to make practical and informed decisions, without an overuse of jargon

This is a full-time position based in Stockholm.