Strategic Information Security Lead – GDPR & ISO 27001

IST Group AB; Stockholms kommun; Hybrid; SEK 1,100,000 - 1,500,000; Full time

Job summary

IST Group AB is seeking an Information Security Manager to safeguard information assets, drive compliance initiatives, and strengthen security culture across the IST Group. The role collaborates with product and development teams, customers, auditors, and stakeholders across multiple countries.

You will lead policy development, governance activities, and risk assessments, embedding privacy and security by design while ensuring GDPR, ISO 27001, and NIS2 compliance across the organization.

Qualifications

• Bachelor’s degree in information security, computer science, IT, law, business, or related field.
• Experience with information security, cybersecurity, risk management and/or compliance.
• Experience with GDPR and information security governance, ISO 27001, NIS2, ISAE 3000, SOC reporting, or similar frameworks.
• Experience supporting audits, inspections, or compliance reviews.
• Strong communication and stakeholder management skills.
• Proactive, self-driven, and structured working style.
• Certifications such as ISO 27001, CISSP, CISM, CRISC are advantageous.

Responsibilities

• Develop and maintain information security policies, standards and procedures across the Group.
• Lead and coordinate information security governance activities.
• Drive GDPR, NIS2, ISO 27001 and related regulatory compliance.
• Coordinate security incidents, investigations and corrective actions.
• Promote security awareness and track security metrics for management.

Skills

Information security

Governance

GDPR

ISO 27001

NIS2

SOC reporting

Audits

Stakeholder management

Communication

Education

Bachelor's degree in Information Security

Job description

IST Group AB is seeking an Information Security Manager to safeguard information assets, drive compliance initiatives, and strengthen security culture across the IST Group. The role collaborates with product and development teams, customers, auditors, and stakeholders across multiple countries.

You will lead policy development, governance activities, and risk assessments, embedding privacy and security by design while ensuring GDPR, ISO 27001, and NIS2 compliance across the organization.