InfoSec & Data Governance Specialist

Permobil; Sundsvalls kommun; On-site; SEK 900,000 - 1,300,000; Full time

Job summary

Permobil is seeking an Information Security Specialist to lead data protection, governance, and compliance using Microsoft Purview across the organization. The role demands translating security and privacy requirements into practical controls that support business operations while protecting sensitive information.

The successful candidate will own data classification, labeling, DLP programs, and information lifecycle governance, collaborating with Legal and Privacy teams on DPIAs and

Qualifications

• Bachelor’s degree or equivalent in information security or related field.
• 5+ years in information security or IT governance; 3+ years with Purview.
• Experience implementing data classification, labeling, and DLP globally.
• Knowledge of ISO/IEC 27001/27701, NIST CSF 2.0, GDPR, and COBIT.
• SC-401 desirable; CISSP/CISM/CISA or similar advantages.
• Experience with AI data security and regulated industries is a plus.

Responsibilities

• Own data classification framework and information protection strategy.
• Manage Purview capabilities: protection, labels, auto-labeling, DLP, records.
• Monitor security incidents and support investigations.
• Establish data ownership, governance, retention, deletion practices.
• Collaborate on DPIAs, data transfers, and privacy-by-design initiatives.
• Maintain security policies, run risk assessments, map to standards.
• Deliver awareness programs and training, including phishing simulations.
• Develop KPIs on labeling, DLP, audits, and governance effectiveness.

Skills

InfoSec governance

Purview experience

DLP programs

ISO/IEC 27001

NIST CSF 2.0

GDPR knowledge

CISSP/CISM/CISA

SC-401 certification

Education

Bachelor’s degree in Information Security / CS / IS or related field

Equivalent experience

Tools

Microsoft Purview

Microsoft 365 Copilot governance

Job description

Permobil is seeking an Information Security Specialist to lead data protection, governance, and compliance using Microsoft Purview across the organization. The role demands translating security and privacy requirements into practical controls that support business operations while protecting sensitive information.

The successful candidate will own data classification, labeling, DLP programs, and information lifecycle governance, collaborating with Legal and Privacy teams on DPIAs and