Chief Information Security & Technology Officer (CISO)

Westermo Network Technologies AB

Are you an Information Security specialist? Are you ready to take on an overall responsibility and drive the IS area in a global business? Join us as our new CISO! As our world changes, Information & Cyber Security are becoming increasingly important for a company such as Westermo. We have long been known for robust hardware, and increasingly so also for Cyber Security features in our software. Information Security at Westermo is not, and should not be an isolated IT function. It is fundamental to trusted products, resilient operations, and long‑term customer confidence. We are now looking for a Global Chief Information Security Officer (CISO) to define, lead, and govern our global cyber security agenda across the entire global organization. This is a diverse role, with operational and strategic aspects. Governance, risk management, and operational resilience are key focus areas. In this global role, you will work across all levels; from the executive management team, our leaders, and key functions across Westermo’s global operations. You will collaborate with IT, R&D, Manufacturing, Operations & Quality to ensure information security is embedded into decision‑making, processes, and culture across the company. Are you our next Global Chief Information Security Officer (CISO)? As Global CISO, you oversee all Information Security related issues. You are the domain expert, the advisor and coordinator. You make sure that Westermo follows IS laws, directives, standards and also set up our own strategy, policies and guidelines. You lead the work and influence people in all departments, making sure we have the right routines, trainings, risk assessments and pass our audits. You will not be starting from a clean slate, but there will be large opportunities to challenge current state and shape the future. Key Responsibilities Advise on identification, assessment, and prioritization of cyber risks across Westermo Provide direction and governance for the Information Security Management System (ISMS) in accordance with ISO 27001, including audits and scope expansion across Westermo companies Support compliance with applicable cyber security regulations and standards (e.g. ISO 27001, IEC 62443, NIS2, customer security requirements) Provide oversight and advisory input on third‑party and supply‑chain cyber security risks Create awareness, teach and train others in the organization. Report regularly to executive management on cyber security posture, risks, incidents, and initiatives Who Are We Looking For? We are looking for someone who has experience in Information Security. You might be an expert in one area of Information Security, but you are looking for a wider role. Or you are already working with broad topics, but are looking for more responsibility, and the opportunity to make your own mark on a role and organization. You like it in a medium sized company; where there’s room for influence, and not hierarchical and bureaucratic. You appreciate having different kinds of competence around you, and are comfortable being the expert in your own area. You can speak to all of your stakeholders, and meet them where they are; from executive management to customers and employees. You are also comfortable in a global company; English is not a problem for you, and you understand there will be differences between countries, even if you don’t know exactly what they are. In short; you are an Information Security Specialist who wants to get in the driver’s seat, with your supporters in the seats next to you. Requirements You are familiar with ISO 27001 and NIS2. Strong knowledge of both IT security and OT/ICS security in industrial environments Great communication skills, being able to teach and train others, but also learn from other specialists in the organization. Proven experience with Information Security governance, risk management, and incident response Meritorious Background from industrial, manufacturing, R&D, or mission‑critical system environments Relevant certifications (e.g. CISSP, CISM, or equivalent) Interest or experience in digital transformation and data governance In Return, We Offer: You will be working at the forefront of technology in a friendly, open culture where you get the opportunity to learn from skilled colleagues every day. A mature and caring leadership in a flat organization. Through our collective agreement you will be covered in terms of insurance, pension and other benefits. We like to have fun together and we regularly enjoy sports and other social activities as a team. We believe that magic happens when people meet. We are a learning organization and we truly love to try new things, think outside the box and be innovative together! Basic Information Location: Västerås, Sweden (preferred) or other Westermo locations Job type: Full‑time Employment contract: Permanent Application: We review applications continuously — apply as soon as possible Contact: Hiring Manager: Johan Inestam, CFO, at johan.inestam@westermo.com Recruiter: Elin Sandell, at elin.sandell@westermo.com About Westermo Westermo is a leading provider of Industrial Data Communications equipment to the global market. Sales are conducted through our own offices in key markets in Europe, North America, Australia and Asia, as well as through distributors and OEM customers worldwide. Development and manufacturing take place in Sweden, Ireland, Germany and Switzerland. Westermo was founded in 1975 and today has over 480 employees with a turnover of around 1 Billion SEK. The company is a wholly owned subsidiary of Ependion, listed on the Nasdaq OMX Nordic stock exchange.

Husqvarna AB

About Husqvarna We’re one of the world’s oldest start-ups — and we’re just getting started. At Husqvarna Group, innovation is in our DNA. With over 330 years of heritage and a passion for pioneering technology, we design and deliver world-class products and solutions for forest, park, garden and construction care. From robotic lawn mowers to cutting-edge chainsaws and sustainable battery systems, we’re shaping the future — and we want you to be part of it. About The Team You will join the Group Cyber and Information Security Office — a central function that sets the direction for cyber, information and product security across Husqvarna Group. Our responsibility covers both internal security — protecting our people, information, systems and ways of working — and product security, ensuring that the connected products and services we deliver to customers are secure, trusted and resilient. We create the governance, frameworks and common ways of working that help the business build security into everything we do. While the role is part of CISO organization, this is not a traditional Information Security or IT Security position. Instead, your focus will be on securing the connected products we design, develop and deliver to customers around the world. As our products become increasingly connected, cybersecurity becomes an essential part of the product lifecycle and customer experience. In this role, you will support all three business divisions — Husqvarna, Gardena and Construction — ensuring product security is embedded in everything we do. You will collaborate closely with Legal, Compliance, R&D and divisional Product Security Managers as well as senior business stakeholders to build a strong governance structure and drive consistent implementation across the Group. About The Role As Product Security Officer, you will play a key role in strengthening Husqvarna Group’s product security capabilities. You will report to the Chief Information Security Officer (CISO) and act as the central authority for product security across divisions. Your mission will be to set the direction, frameworks and follow-up structures needed to secure our increasingly connected and digital products. You will ensure that security is integrated throughout the entire product lifecycle while supporting the development of secure, connected products that meet both customer expectations and evolving regulatory requirements. A key and time-critical part of the role is to drive Husqvarna Group’s implementation of the Cyber Resilience Act (CRA). The goal is to establish the product security governance, processes and evidence needed for CRA readiness across divisions — with mandatory vulnerability and incident reporting applying from September 2026 and full CRA obligations applying from December 2027. You will play a central role in creating momentum, aligning stakeholders and ensuring that our ways of working evolve fast enough to meet these regulatory milestones and future market expectations. You will engage with stakeholders at all levels — from R&D engineers to executive leadership — and ensure that our security practices align with regulatory requirements, business needs, and market expectations. Success in this role depends just as much on your ability to influence people as on your technical expertise. You will drive change across the organization, build alignment with R&D and senior stakeholders, and help create momentum around product security initiatives—even when priorities compete. This is a role with great visibility and long-term potential: over time, you will be instrumental in shaping how Husqvarna Group builds trust in its products globally. This is a unique opportunity to influence how one of the world's leading manufacturers secures the next generation of connected products. About You You are a pragmatic and collaborative leader who thrives on making complex topics clear, actionable and easy to understand. With a positive, solution-oriented mindset, you know how to simplify challenges while creating meaningful impact across the organization. You excel at building trust and influencing others without formal authority, enabling you to drive change and create momentum in a complex, global environment. You are confident challenging stakeholders when needed, while maintaining strong relationships and bringing people together around shared goals. Comfortable operating at both a strategic and technical level, you enjoy collaborating with cross-functional teams and turning strategy into practical action. You combine strong stakeholder management skills with the ability to navigate ambiguity, inspire confidence and ensure that security becomes an integral part of the way products are developed Your Skills And Background • Extensive experience working with product security for connected products, including product security governance, secure product development and regulatory requirements such as the Cyber Resilience Act. • Experience from industries such as automotive, consumer electronics, home appliances, industrial equipment, IoT, embedded systems or other connected product environments is highly valued. • Experience from R&D, product development or engineering environments is especially important — even more than a traditional security background — combined with the ability to lead cross-functional teams and translate security needs into practical product development actions. • Experience from product development, R&D or application development environments — with the ability to “speak the language” of engineers and developers. • Experience collaborating closely with R&D and product development organizations. • Proven ability to influence without formal authority and align multiple stakeholders towards common goals. • Confidence in engaging with senior leadership and executive forums. • Experience establishing governance, frameworks and ways of working that create long-term business value. • A collaborative and agile mindset, with respect for autonomous teams and modern ways of working. Location This position will be based at one of our sites in Sweden: Huskvarna, Stockholm, or Jonsered. More info in the job application link.

Man Group

About Man Group Man Group is a global alternative investment management firm focused on pursuing outperformance for sophisticated clients via our Systematic, Discretionary and Solutions offerings. Powered by talent and advanced technology, our single and multi-manager investment strategies are underpinned by deep research and span public and private markets, across all major asset classes, with a significant focus on alternatives. Man Group takes a partnership approach to working with clients, establishing deep connections and creating tailored solutions to meet their investment goals and those of the millions of retirees and savers they represent. Headquartered in London, we manage $228.7 billion* and operate across multiple offices globally. Man Group plc is listed on the London Stock Exchange under the ticker EMG.LN and is a constituent of the FTSE 250 Index. Further information can be found at www.man.com At Man Group, we respect your privacy and we are committed to protecting and safeguarding your Personal Data. We have developed policies and processes which are designed to provide for the security and integrity of your Personal Data. We are committed to Processing your Personal Data fairly and lawfully, and being open and transparent about such Processing. For further information on how we process your data, please see the privacy notice for applicants here * As at 31 March 2026   The Team We are looking for a CISO to take full ownership of Information Security and Identity & Access Management at Man Group. This is a leadership role that is as much about driving change across the firm as it is about running the security function. They will set standards, influence behaviour, embed security into business processes, and work with departments across the organisation to raise the bar on how Man Group manages risk.  A Deputy CISO will own day-to-day security operations and policy, allowing the CISO to focus on identity transformation, standards, governance, and driving security culture firm-wide.  Reporting to the Head of Enterprise Risk, the CISO will be responsible for overseeing Identity and Access Management (IAM) Programme, IAM BAU, and Information Security.   Role Responsibilities Strategy & Standards * Own the information security strategy, aligning security investment to the firm's risk appetite * Drive security culture and awareness across the firm through training, engagement, and communications * Set and enforce security standards across technology, operations, and business departments, not just within InfoSec * Work with teams across the organisation to understand existing process and embed secure access into existing systems * Enable the safe adoption of AI and emerging technologies by defining practical security guardrails * Own the Information Security and IAM Risks and Controls Self-Assessment (RCSA), ensuring that risks are identified, controls are documented and remediation is tracked Identity & Access Management * Own the IAM strategy and transformation roadmap, driving the migration from legacy provisioning to a modern, governed identity platform * Directly oversee the identity governance implementation, including application onboarding, lifecycle automation, access controls and defining central APIs * Remediate audit findings related to identity and access management Governance & Reporting * Chair the Information Security Steering Committee * Present security posture, risk, and programme updates to boards and the Risk and Finance Committee * Provide oversight of third-party risk management in coordination with the dedicated TPRM team * Support SOC-1 audit processes   Key Competencies Essential * A builder mindset, comfortable with balancing competing priorities * Strong understanding of technical security implementations, trade-offs, APIs and architectural design patterns and a working understanding of modern open-source based application design * Demonstrable experience in a senior information security role, ready to step into a full CISO mandate * Proven ability to drive change outside of a direct reporting line, influencing technology, operations, and business teams to adopt security standards * Strong communicator, comfortable presenting to boards and equally comfortable in a technical design review Advantageous * CISSP certification * Experience with identity governance platforms and large-scale IAM transformation programmes * Familiarity with infrastructure-as-code environments (Terraform, GitOps workflows) * Experience with hybrid identity environments (Active Directory, Entra ID, SSO platforms) * Experience defining security frameworks for emerging technology enablement * Background in a regulated industry, with an appreciation for the governance, operational, and compliance requirements that come with itith cloud platforms (e.g., Azure or AWS) and containerization (e.g., Docker, Kubernetes) Inclusion, Work-Life Balance and Benefits at Man Group You'll thrive in our working environment that champions equality of opportunity. Your unique perspective will contribute to our success, joining a workplace where inclusion is fundamental and deeply embedded in our culture and values. Through our external and internal initiatives, partnerships and programmes, you'll find opportunities to grow, develop your talents, and help foster an inclusive environment for all across our firm and industry. Learn more at www.man.com/diversity. You'll have opportunities to make a difference through our charitable and global initiatives, while advancing your career through professional development, and with flexible working arrangements available too. Like all our people, you'll receive two annual 'Mankind' days of paid leave for community volunteering. Our comprehensive benefits package includes competitive holiday entitlements, pension/401k, life and long-term disability coverage, group sick pay, enhanced parental leave and long-service leave. Depending on your location, you may also enjoy additional benefits such as private medical coverage, discounted gym membership options and pet insurance. Equal Employment Opportunity Policy Man Group provides equal employment opportunities to all applicants and all employees without regard to race, color, creed, national origin, ancestry, religion, disability, sex, gender identity and expression, marital status, sexual orientation, military or veteran status, age or any other legally protected category or status in accordance with applicable federal, state and local laws. Man Group is a Disability Confident Committed employer; if you require help or information on reasonable adjustments as you apply for roles with us, please contact TalentAcquisition@man.com.