Senior GRC Consultant

Orange Cyberdefense; Tuna-Hästberg; Hybrid; SEK 600,000 - 900,000; Full time

Job summary

Orange Cyberdefense, located in Dalarnas län, Sweden, is seeking an experienced professional in Governance, Risk & Compliance (GRC) to join their cybersecurity team. This role involves conducting cybersecurity maturity assessments, performing risk assessments, and ensuring compliance with regulatory frameworks.

The ideal candidate will have at least 5 years of experience in IT security, possess strong communication skills, and be proficient in both Swedish and English. Join us in our mission to secure the digital society while working collaboratively in a dynamic environment.

Qualifications

• At least 5 years of experience within IT security and/or information security.
• Experience in leadership roles within projects.
• Knowledge of Cyber Resilience Act (CRA) and AI Act.

Responsibilities

• Conduct cybersecurity maturity assessments for clients.
• Perform risk assessments and risk management activities.
• Carry out compliance reviews within regulatory frameworks.

Skills

Information security management systems (ISO 27001)

Cybersecurity maturity assessments

Risk assessments

Data security

Coaching and leading

Professional proficiency in Swedish and English

Tools

Microsoft security product suite

CISSP

CISM

Job description

Are you experienced in Governance, Risk & Compliance (GRC) and looking to join a workplace where knowledge sharing and collaboration are fundamental values? Do you enjoy working as part of a team and driving change with the right priorities and high efficiency? If so, this might be a position for you!

About the Role

The role involves project-based work within IT and information security, helping our clients reduce business risks and strengthen their cybersecurity capabilities. We work during regular business hours, Monday through Friday, and value face-to-face interaction with our clients whenever possible. However, remote work from our offices is also a common part of how we operate.

Depending on the assignment, the role may include both leading and governing initiatives as well as actively participating in transformation and improvement projects.

Examples of responsibilities include:

• Conducting cybersecurity maturity assessments for clients.
• Performing risk assessments and risk management activities together with clients.
• Carrying out compliance reviews and gap analyses within regulatory and governance frameworks.

We Are Looking for Someone Who Has Experience With:

• Working with, or a strong understanding of, information security management systems such as ISO 27001, the NIS2 Directive, and frameworks such as NIST CSF 2.0 or CIS Controls.
• Data security and information protection.
• Coaching and leading colleagues and/or clients.
• At least 5 years of experience within IT security and/or information security.
• Professional proficiency in both Swedish and English, spoken and written.

Meritorious Experience

The following qualifications are considered an advantage:

• Experience in leadership roles within projects, such as Project Manager, CISO, or similar positions.
• Experience supporting sales activities or working in a customer-facing sales role.
• Relevant cybersecurity certifications, such as CISSP, CISM, or equivalent.
• Knowledge of the Cyber Resilience Act (CRA) and the AI Act.
• Cloud security experience.
• Experience with the Microsoft security product suite, including technologies such as Purview and Data Loss Prevention (DLP).

Who are you?

We are looking for someone who shares and embodies our core values: Simplicity, Humble, Innovation, Respect and Trust.

You are a strong communicator who can build trust with customers, understand their needs, and translate requirements into practical and effective recommendations. You thrive in a dynamic environment, take initiative, and approach challenges with a solution-oriented mindset, viewing them as opportunities to create value and drive improvement.

Collaboration comes naturally to you, and you enjoy working as part of a team where knowledge sharing, mutual support, and collective success are highly valued. Finally, we are looking for someone who thrives in an innovative industry that is constantly evolving and changing.

Who are we?

Orange Cyberdefense is Sweden’s leading cybersecurity company. Our vision is to help secure the digital society. We provide our customers with services across a wide range of areas, from advanced technical solutions to strategic services such as security governance, risk management frameworks, and risk assessments. We are 400 colleagues in Sweden and 3,000 colleagues globally.

At Orange Cyberdefense, we are all different, but we share the same passion for cybersecurity—and that is our greatest strength. We are proud of our diverse perspectives, experiences, and backgrounds, and we firmly believe that creating solutions for everyone requires including everyone. That is why we are committed to ensuring that all applications are assessed fairly and equally.