IT Compliance Lead: ISMS, SOX & NIS2 (On-site with Flex)

HemoCue; Ängelholms kommun; Presencial; SEK 650.000 - 850.000; Jornada completa

Descripción de la vacante

HemoCue, part of Danaher, is seeking an IT Compliance Officer to strengthen information security, IT compliance and regulatory alignment across the organization in Ängelholm, Sweden. You will drive ISMS, IT SOX, NIS2 compliance and software validation (GxP/CSV) in a fast-paced, cross-functional environment.

You’ll monitor regulatory developments, collaborate with global teams, and report to the Director Procurement & IT on governance initiatives essential to patient care and data protection.

Formación

• Bachelor’s degree in Engineering, Computer Science, or related field or equivalent experience.
• Some years of experience in IT compliance, IT audit, or information security.
• Knowledge of regulatory frameworks such as NIS2, SOX, GxP/CSV, and risk management.
• Familiarity with ISO 27001, ISO 13485, and GDPR.
• Experience in regulated and/or global environments.

Responsabilidades

• Own and continuously improve the Information Security Management System (ISMS).
• Drive the IT SOX program including controls, testing, and remediation.
• Act as NIS2 compliance lead and regulatory contact.
• Maintain and improve software validation (GxP / CSV) processes.
• Monitor and implement regulatory developments (NIS2, ISO27001).

Conocimientos

ISMS

IT compliance

IT audit

Information security

Regulatory awareness

Educación

Bachelor’s degree in Engineering/CS or related field

Descripción del empleo

HemoCue, part of Danaher, is seeking an IT Compliance Officer to strengthen information security, IT compliance and regulatory alignment across the organization in Ängelholm, Sweden. You will drive ISMS, IT SOX, NIS2 compliance and software validation (GxP/CSV) in a fast-paced, cross-functional environment.

You’ll monitor regulatory developments, collaborate with global teams, and report to the Director Procurement & IT on governance initiatives essential to patient care and data protection.