Security Compliance Manager - Nexus Tieto Indtech (m/f/d)

Tieto; Sweden; On-site; SEK 50,000 - 70,000; Full time

Job summary

Tieto is seeking a Security Compliance Manager to enhance security governance and compliance within its Nexus division. The role entails coordinating security activities and ensuring adherence to regulations such as DORA and NIS2.

The successful candidate will work with various teams and manage audits while developing security documentation and procedures. Candidates should possess a relevant degree and experience in security compliance frameworks.

This is an opportunity to contribute to enhanced security practices in an innovative environment.

Qualifications

• Experience in security compliance, governance or regulatory frameworks.
• Experience in audits and stakeholder management.

Responsibilities

• Coordinate compliance activities for DORA, NIS2 and customer-specific frameworks.
• Provide security documentation for RFI/RFP processes.
• Support ISO 27001, ISAE 3402 and customer audits.
• Conduct supplier security assessments.
• Develop and maintain security procedures and governance documents.
• Maintain the annual security plan.

Skills

Information security controls

Interpretation of regulatory requirements

Strong communication skills

Analytical and structured mindset

Education

Bachelor's or master's degree in IT/security/compliance

Tools

ISO 27001

ISAE 3402

DORA

NIS2

Job description

Introduction

We are looking for a Security Compliance Manager to strengthen our security governance, regulatory compliance efforts, and customer-driven security assurance within Nexus. In this role, you will work closely with product, delivery, sales, customer and central GRC teams to ensure adherence to regulatory frameworks, customer requirements, and corporate policies.

Key Responsibilities

• Regulatory & Customer Compliance
  • Coordinate compliance activities for DORA, NIS2 and customer-specific frameworks.
  • Ensure internal teams implement required controls and follow compliance obligations.
  • Track compliance status, deviations and corrective actions.
  • Participate in Indtech security and compliance forums.
• Security Documentation, RFI/RFP Support & Bid Reviews
  • Provide security documentation for RFI/RFP processes.
  • Conduct security reviews of bids.
  • Collaborate with sales and product teams on security requirements.
• Audit Management (ISO, ISAE, Customer Audits)
  • Support ISO 27001, ISAE 3402 and customer audits.
  • Prepare audit evidence and track findings.
  • Ensure findings are closed with responsible teams.
• Supplier Security & Third-Party Management
  • Conduct supplier security assessments.
  • Follow up supplier documentation and findings.
  • Support Sourcing (procurement) in supply chain compliance.
• Procedures, Training & Governance
  • Develop and maintain security procedures and governance documents.
  • Conduct internal security and compliance training.
  • Maintain policy and control documentation overview.
• Annual Security Plan & Continuous Improvement
  • Maintain the annual security plan.
  • Monitor maturity development and compliance performance.
  • Identify and drive improvement initiatives.

Qualification Requirements

Education & Experience

• Bachelor\'s or master\'s degree in IT/security/compliance or equivalent experience.
• Experience in security compliance, governance or regulatory frameworks.
• Knowledge of ISO 27001, ISAE 3402, DORA, NIS2.
• Experience in audits and stakeholder management.

Skills & Competence

• Strong understanding of information security controls.
• Ability to interpret regulatory and customer requirements.
• Strong communication and documentation skills.
• Structured, analytical and proactive.

Personal Attributes

• High integrity and responsibility.
• Independent and solution-oriented.
• Comfortable working with many stakeholders simultaneously.

Why Join Us

In this role, you will strengthen Nexus\' compliance maturity and work closely with operational, product and corporate teams to ensure trust, transparency and security across the organization.

About Indtech Nexus

Nexus supports its customers in business process automation by exchanging and sharing business information with their business partners. We have two service areas: Business Information eXchange (BIX) and Multichannel.

Nexus has a large existing customer base in the Nordics and is a growing business unit within Tietoevry Industry. With a unique combination of global capabilities and local presence, Nexus currently serves more than 4000 customers in 50+ countries around the world - creating a digital advantage for millions every day.

Join us and make your mark!

We look forward to your application!

Please attach your CV or LinkedIn-profile and we\'ll reach out to you. Interviews will be held on a continuous basis, so we encourage you to apply today.

If you have any questions regarding this role, please contact Ann Kristin Bøhlum, Head of Data Security & Support, via e-mail ann-kristin.boh

[e-mail]

Qualifications

Additional Information

At Tieto, we believe in the power of diversity, equity, and inclusion. We encourage applicants of all backgrounds, genders (m/f/d), and walks of life to join our team, as we believe that this fosters an inspiring workplace and fuels innovation. Our commitment to openness, trust, and diversity is at the heart of our mission to create digital futures that benefit businesses, societies, and humanity.

Diversity, equity and inclusion (tietoevry.com)