IT Security and Compliance Framework Specialist

RED Global; Göteborgs kommun; Hybrid; SEK 600,000 - 900,000; Full time

Job summary

RED Global is seeking an IT Security and Compliance Framework Specialist to join a 6-month contract for a global MedTech leader. Hybrid work in Gothenburg (3–4 days onsite, some flexibility for fewer onsite days). ASAP start. You will manage ISMS/QMS, implement GDPR/NIS2/FDA 21 CFR Part 11 controls, and lead audits and policy development.

The role emphasizes risk assessments, CAPA closure, and alignment with Agile/DevSecOps in a regulated environment. Experience in MedTech or Pharma is preferred.

Qualifications

• 3+ years in management systems (ISMS / QMS) with focus on IT compliance frameworks.
• Strong knowledge of GDPR, NIS2, and FDA 21 CFR Part 11.
• Expertise in maintaining ISMS per ISO/IEC 27001.
• Experience with risk assessments, internal/external audits, CAPAs, and policy development.
• MedTech or Pharma sector experience preferred.
• CISM or CISA certifications are advantageous.
• Understanding of Agile, DevSecOps, and SDLC processes.

Responsibilities

• Oversee management systems ISMS/QMS with IT compliance focus.
• Maintain ISO/IEC 27001 ISMS.
• Conduct risk assessments and audits, manage CAPAs.
• Develop policies and ensure regulatory compliance.
• Collaborate in MedTech/Pharma environments.

Skills

IT compliance frameworks

Regulatory knowledge

Information Security Management

Audits & CAPA management

Job description

On behalf of one of our key partners, RED now has a new opportunity for an IT Security and Compliance Framework Specialist to join a project for a global leader in the MedTech industry.

This role offers a 6-month initial contract with strong potential for extension, starting ASAP.

The working model is Hybrid (3–4 days/week onsite in Gothenburg, Sweden), though our client is open to fewer onsite days for the ideal candidate.

Key responsibilities & required experience:

• 3+ years of experience in management systems (ISMS / QMS) with a heavy focus on IT compliance frameworks.
• Strong knowledge of strict regulatory frameworks, specifically GDPR, NIS2, and FDA 21 CFR Part 11.
• Expertise in maintaining Information Security Management Systems per ISO/IEC 27001.
• Solid background in risk assessments, internal/external audits, CAPAs, and policy development.
• Experience within the highly regulated MedTech or Pharmaceutical sector is strongly preferred.
• Industry certifications such as CISM or CISA are a distinct advantage.
• Understanding of Agile, DevSecOps, and Software Delivery Lifecycle (SDLC) processes.