Security Compliance Lead

Tieto Deutschland GmbH; Solna kommun; On-site; SEK 90,000 - 120,000; Full time

Job summary

Nexus, part of Tietoevry Industry's Indtech unit, seeks a Security Compliance Manager to strengthen governance, regulatory compliance, and customer security assurance across Multichannel & BIX. You will work with product, delivery, sales, customers and GRC teams to ensure adherence to frameworks and policies.

Core duties include coordinating DORA and NIS2 compliance, producing security documentation for RFI/RFPs, and supporting ISO/ISAE audits.

Qualifications

• Bachelor’s or master’s degree in IT/security/compliance or equivalent experience.
• Experience in security compliance, governance or regulatory frameworks.
• Knowledge of ISO 27001, ISAE 3402, DORA, NIS2.
• Experience in audits and stakeholder management.

Responsibilities

• Coordinate compliance activities for DORA, NIS2 and customer-specific frameworks.
• Ensure internal teams implement required controls and follow compliance obligations.
• Track compliance status, deviations and corrective actions.
• Participate in Indtech security and compliance forums.
• Provide security documentation for RFI/RFP processes.
• Conduct security reviews of bids.
• Collaborate with sales and product teams on security requirements.
• Support ISO, ISAE 3402 and customer audits.
• Conduct supplier security assessments and follow up on findings.
• Develop and maintain security procedures and governance documents.

Skills

InfoSec controls

Regulatory requirements

Communication

Documentation

Analytical thinking

Education

Degree in IT/Security/Compliance

Security governance experience

ISO 27001 / ISAE 3402 / DORA / NIS2

Audits & Stakeholders

Job description

Nexus, part of Tietoevry Industry's Indtech unit, seeks a Security Compliance Manager to strengthen governance, regulatory compliance, and customer security assurance across Multichannel & BIX. You will work with product, delivery, sales, customers and GRC teams to ensure adherence to frameworks and policies.

Core duties include coordinating DORA and NIS2 compliance, producing security documentation for RFI/RFPs, and supporting ISO/ISAE audits.