Risk & Compliance Analyst

Capgemini; Stockholms kommun; Hybride; SEK 700 000 - 900 000; Plein temps

Résumé du poste

Capgemini Engineering in Sweden seeks a Risk & Compliance Analyst to strengthen regulatory and cyber resilience in telecom security. You will lead compliance management, risk analysis, and support homologation and certification activities for 5G cloud-native environments.

You will interpret regulations like NIS2, EU Cybersecurity Act, CRA, RED and NESAS/SCAS, build evidence, and drive audits, reporting, and continuous improvement within a global, diverse team.

Qualifications

• Bachelor’s or Master’s degree in Telecommunications, Electronics, Computer Science, Cybersecurity, or related field.
• 8–10 years of experience in cybersecurity testing, vulnerability management, or related operations.

Responsabilités

• Conduct systematic security and compliance risk analyses across telecom products, infrastructure and cloud-native environments.
• Coordinate homologation, type approval and product security certification processes.
• Build and maintain compliance evidence, control mappings and certification artefacts for audits and inspections.
• Drive risk-based remediation plans and continuous improvement as regulations evolve.

Connaissances

Cybersecurity testing

Vulnerability management

Penetration testing

Security assessment

Cybersecurity operations

Formation

Bachelor's degree

Master's degree

Outils

Tenable

Qualys

Nessus

Burp Suite

Nmap

Metasploit

Microsoft Defender

Description du poste

PermanentExperienced ProfessionalsProducts & Systems EngineeringID 550414-en_USAt Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.Your roleAs a Risk & Compliance Analyst you will be responsible for strengthening the organization's regulatory and cyber resilience within the telecom security domain through compliance management, security risk analysis, and end-to-end support of homologation, type approval, and product security certification activities.In this role you will play a key role in:• Interpreting and operationalizing telecom security regulations, directives, and standards — including NIS2, the EU Cybersecurity Act and European certification framework, the Cyber Resilience Act (CRA), the Radio Equipment Directive (RED) cybersecurity requirements, 3GPP/GSMA NESAS-SCAS, and ISO/IEC 27001• Conducting systematic security and compliance risk analyses across network products, infrastructure, cloud-native platforms, and 5G core environments, identifying gaps, quantifying and prioritizing risk, and defining risk treatment and remediation plans• Coordinating and supporting homologation, type approval, and product security certification, including preparing technical and conformity documentation, liaising with accredited test laboratories, certification bodies, and regulators, and steering products through NESAS/SCAS, RED (EN 18031), Common Criteria/EUCC, and applicable national approval schemes.• Building and maintaining compliance evidence, control mappings, and certification artefacts, and preparing the organization for internal and external audits, regulatory inspections, and customer assessments• Establishing and maintaining compliance, risk, and homologation methodologies, standards, and reporting frameworks, producing risk and compliance status reporting for management, and driving continuous improvement as regulations, certification schemes, and the telecom threat landscape evolve.Your profile• Bachelor’s/master’s degree in Telecommunications, Electronics, Computer Science, Cybersecurity, or a related field.• Min 8-10 years of experience in cybersecurity testing, vulnerability management, penetration testing, security assessment, or cybersecurity operations environments.• Strong understanding of cybersecurity frameworks, risk management principles and security controls• Experience with vulnerability assessment and security testing tools, including platforms such as Tenable, Qualys, Nessus, Burp Suite, Nmap, Metasploit, Microsoft Defender, or similarWhat we believe you will enjoy about working here• Working with cutting-edge telecom technologies, including 5G Core and cloud-native architectures• Opportunities to contribute to large-scale transformation projects for leading telecom clients• Being part of a collaborative, international, and highly skilled team• Continuous learning opportunities and strong career development supportApplicationThis role requires EU citizenship and is subject to security classification, meaning that a security screening will be carried out in accordance with Swedish legislation.As part of our recruitment process, identity verification will be conducted through inspection of your ID card, and background checks may be carried out as required.#LI-JH9About CapgeminiCapgemini is the business transformation partner for enterprises in the age of AI. We help organizations imagine and build an intelligent, sustainable future, combining AI, technology and human ingenuity to transform how they operate, innovate, and grow. With unique end-to-end capabilities spanning strategy, technology, engineering and intelligent operations, we bring together deep industry expertise and market-leading capabilities in AI, cloud and data to turn ambition into measurable business outcomes at scale. Supported by a robust ecosystem of partners and nearly 60 years of expertise, Capgemini is a responsible and diverse global organization of over 410,000 team members in more than 50 countries. The Group reported 2025 revenues of €22.5 billion.Make it real | www.capgemini.com