Security Officer

Scrive; Stockholms kommun; Hybrid; SEK 850,000 - 1,100,000; Full time

Job summary

Scrive is seeking a Security Officer in Stockholm (hybrid with hub options across Europe) to lead the ISMS implementation and ensure compliance with ISO 27001 and SOC 2 Type 2. You will liaise between Security Office and operations, turning policies into practical controls.

You will report to the CISO and collaborate with engineering, audits, and risk teams to monitor security controls and drive improvements across the organization.

Qualifications

• Experience in information security, compliance, or an operational security role.
• Ability to work independently within an established framework with log analysis and automation skills.
• Knowledge of SOC 2 Type 2, ISO 27001 clauses, and ISMS structures.
• Strong communication to explain security requirements clearly.
• Analytical mindset with understanding of system architecture.

Responsibilities

• Implement and monitor controls across ISMS.
• Collaborate with engineering to build control monitoring tooling.
• Support policy, compliance, and audits.
• Assist risk assessment, update risk register, and coordinate incidents.
• Develop security guidance and awareness documentation for employees.

Skills

InfoSec experience

Compliance knowledge

Log analysis

AI automations

Infrastructure security

SOC 2 Type 2

ISO 27001 clauses

ISMS familiarity

Stakeholder communication

Analytical thinking

Technical aptitude

Security tooling

Tools

Jira

Job description

We Care, We Challenge, We Commit, We Collaborate

Join Scrive and be part of an international, fast-growing company headquartered in Stockholm, Sweden. Collaborate with smart, caring, and driven colleagues across Europe as we shape the Scrive story.

The opportunity

We are currently looking for a Security Officer to join our team and play a key role in supporting the implementation and maintenance of Scrive's Information Security Management System (ISMS) and ensuring compliance with ISO 27001, SOC 2 Type 2 and other security standards and regulatory frameworks. This role is an exciting opportunity to act as a liaison between the Security Office and operational teams, helping to translate security policies into practical controls while monitoring compliance across the organization.

The role will preferably be based in Stockholm, but we're also open for candidates working from one of our Hubs (Copenhagen, Oslo, Berlin, Amsterdam or Brno). You will report to the CISO (Chief Information Security Officer) who is working remotely from Latvia.

As a Security Officer you will:

• Implement and monitor controls – Build automations to verify that security controls are continuously implemented and operational according to security best practices.
• Collaborate with engineering teams to build tooling for control monitoring and security review automations.
• Support policy and compliance – Assist in maintaining and updating security policies, procedures, and guidelines, while supporting internal and external audits.
• Manage risks and incidents – Support the risk assessment process, help maintain the risk register, and assist in incident response coordination and documentation.
• Drive awareness and communication – Support security awareness training programs and create clear security guidance documentation for our employees.

What we’re looking for

To succeed in this role, you should have:

• Relevant Experience within information security, compliance, or an operational security role where you have worked independently within an established framework. Technical capabilities to work with log analysis and handling tools, AI based automations and similar technologies. Technical capabilities in configuring and managing infrastructure and assure its security configurations.
• Proven knowledge of SOC 2 Type 2, ISO 27001 clauses, Annex A controls (focus on more technical controls here), and ISMS structures, especially on technical implementation and monitoring of this.
• Stakeholder Communication – The ability to explain complex security requirements in plain language and provide helpful guidance without causing friction.
• Analytical Thinking & Technical Aptitude – A mindset for identifying gaps in documentation or control design, combined with a high-level understanding of system architecture.

Bonus points if you have:

• Regulatory Awareness – Familiarity with eIDAS / TSP (Trust Service Provider) requirements, GDPR, CRA and other regulatory requirements within EU and their technical implementations.
• Project Coordination – Experience coordinating small workstreams and tracking action items using tools like Jira.

In this role, we see that you demonstrate strong skills in Structured, Analytical, Co-operative, and Communicative. These skills will play a key role in our assessment and discussions during the recruitment process.

Don’t meet every single requirement? Apply anyway!

Studies show that women and people from underrepresented groups are less likely to apply for jobs unless they meet every qualification. At Scrive, we value diverse perspectives and encourage anyone who is excited about this role to apply.