InfoSec Leader & Compliance Architect

IST Group AB; Malmö kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Job summary

IST Group AB is seeking an Information Security Manager to develop and maintain our information security framework across the group, collaborating with product, development, customers, auditors and external stakeholders.

You will drive governance, risk assessment, and security by design with a focus on GDPR, NIS2, ISO 27001 and ISAE 3000, while promoting a strong security culture across Scandinavia.

Qualifications

• Bachelor’s degree in information security, computer science, IT, law, business or related field.
• Experience with information security governance, GDPR, ISO 27001, NIS2, ISAE 3000 or similar.
• Experience supporting audits, inspections or compliance reviews.
• Ability to communicate complex security topics to technical and non‑technical audiences.

Responsibilities

• Develop and maintain IST's information security policies, standards, and procedures across the Group.
• Lead information security governance activities and drive regulatory compliance.
• Coordinate security incidents, investigations and corrective actions.
• Conduct risk assessments and support enterprise risk management activities.
• Embed privacy and security by design with product development teams.
• Support audits, reviews, and due diligence processes.
• Maintain data processing agreements and security‑related documentation.
• Drive security awareness and promote a strong security culture across the organization.
• Prepare security reports and metrics for management and stakeholders.

Skills

Information security

Risk management

Stakeholder management

Effective communication

Education

Bachelor’s degree in Information Security/CS/IT/Law/Business

Job description

IST Group AB is seeking an Information Security Manager to develop and maintain our information security framework across the group, collaborating with product, development, customers, auditors and external stakeholders.

You will drive governance, risk assessment, and security by design with a focus on GDPR, NIS2, ISO 27001 and ISAE 3000, while promoting a strong security culture across Scandinavia.