Security, Compliance & IT Leader (SaaS & Azure)

inRiver inc; Malmö kommun; On-site; SEK 1,400,000 - 2,100,000; Full time

Benefits offered by this job

Hybrid work setup

Job summary

Inriver in Malmö is seeking a hands-on Head of Security, Compliance & IT to lead our Enterprise Security, Product Security, Privacy, Compliance and internal IT functions across a global, PE-backed SaaS company.

You will own the security strategy and roadmap, run a small, focused team, and partner with engineering, Legal and HR while engaging customers, auditors and regulators on security.

Qualifications

• Proven track record of developing security strategies with real business impact.
• 5+ years in information security or similar, with at least 2 years in a senior leadership role in a mid-size SaaS/cloud company.
• Excellent stakeholder management and communication skills.
• Leadership and coordination of major security incidents.
• Experience leading compliance audits (ISO 27001 and/or SOC 2 Type 2).
• English business proficiency; eligibility to work in the EU; based within commuting distance of Malmö for hybrid on-site.

Responsibilities

• Set the security strategy and roadmap, develop a multi-year plan grounded in business risk, fund it, and lead initiatives.
• Embed secure SDLC, threat modelling and remediation SLAs in pipelines with product teams.
• Lead vulnerability management and penetration testing across web apps, API, and cloud.
• Own the security posture of the Azure environment and lead the Cloud Security Engineer.
• Run internal IT (M365/Entra ID, device management, identity lifecycle, IT cost) across multiple locations.
• Lead major security incidents as a core member of the IR team, coordinating with Legal and leadership.
• Run end-to-end compliance programs across ISO 27001, ISO 27701, SOC 2 Type 2, GDPR, NIS2, EU Data Act and EU AI Act.
• Own enterprise risk and third-party risk, including BCP/DR and vendor due diligence.
• Be our security voice with customers in security reviews, RFPs and due diligence.

Skills

Security strategy

Leadership

Stakeholder mgmt

Azure security

Compliance audits

GDPR knowledge

IT management

Security incident response

IA/Threat modelling

Tools

Azure Defender

Intune/MDM

Defender for Cloud

PIM

Job description

Inriver in Malmö is seeking a hands-on Head of Security, Compliance & IT to lead our Enterprise Security, Product Security, Privacy, Compliance and internal IT functions across a global, PE-backed SaaS company.

You will own the security strategy and roadmap, run a small, focused team, and partner with engineering, Legal and HR while engaging customers, auditors and regulators on security.