IT Security Specialist to Bonava in Stockholm

CDON AB

Want to shape the entire information security landscape behind one of the Nordics’ most well-known e-commerce marketplaces? At CDON Group, security is a strategic foundation for our growth, data-driven operations, and future innovation. We’re now strengthening our security capabilities and are looking for an Information Security Specialist who wants to take ownership, drive development, and ensure that security is embedded across our products, platforms, and teams. About us Join us at CDON Group, a Swedish listed company with a long history and extensive experience in the e-commerce market. Our mission is to unleash the power of the marketplace to give the best shopping experience in the Nordics. We are dedicated to providing great online shopping experiences and are on the lookout for an Information Security Specialist to join us on this journey for our two Nordic marketplaces: CDON and Fyndiq. About the role This role combines hands-on security work with broader ownership of how we structure, govern, and communicate information security across the company. You will sit within IT but collaborate closely with Legal, Finance etc, as many topics touch on compliance, GDPR, NIS2, the AI Act, and regulatory inquiries. At the same time, we are navigating a unique balance. We are pragmatic, entrepreneurial, and fast-moving, yet also a publicly listed company with expectations on governance, compliance, and structure. This creates an environment where you will help build processes that do not fully exist today, while still working close to the business and making real impact quickly. Some areas of focus include: Helping build security processes and routines, both maintenance and from the ground up Supporting the entire organization with practical, understandable security guidance Working with both technical and non-technical stakeholders Helping raise security maturity while keeping the business moving forward Responsibilities include You will have both structured responsibilities and day-to-day practical tasks. Key areas include: Developing and maintaining information security policies, governance, and documentation Driving risk management activities across systems, suppliers, processes, and new initiatives Ensuring alignment with frameworks such as ISO 27001, NIS2, and GDPR Collaborating closely with Legal on data protection, AI governance, and regulatory communication Supporting IT, infrastructure, and engineering teams with operational security tasks You will also work hands-on with: • Google SecOps and our existing tooling • Vulnerability management • Access and identity management • Coordinating external penetration tests and understanding results • Leading internal training, awareness efforts, and phishing exercises Part of the role also involves presenting findings and explaining why security requirements exist — not just what they are — in ways that engage and motivate colleagues across the business. Qualifications and requirements We are looking for someone who can understand, interpret, and communicate both technical and regulatory requirements. Relevant experience and traits include: A couple of years in information security, IT security, or data protection Relevant degree for the role Understanding of GDPR, NIS2, and IT risk work Strong communication and presentation skills The ability to learn and work with security tools such as Google SecOps Full professional proficiency in Swedish and English Pragmatic mindset and the ability to balance speed with governance Ability to work regularly from Stockholm to collaborate effectively with Legal and support incident handling Some tasks require hands-on IT security understanding, but you do not need to be a programmer. Support is available from backend teams for highly technical areas. What we offer An opportunity to be part of a unique growth journey, actively contributing to the success of the leading e-commerce marketplaces in the Nordics. A collaborative and dynamic work environment, with passionate colleagues who believe in CDON Group’s mission Competitive compensation package, including benefits such as pension and insurance through Max Matthiessen and MyBenefit portal. Career growth opportunities within a rapidly evolving company.   Application Process: Please attach your resume and a brief cover letter outlining your interest and suitability for the job. We will be conducting interviews with candidates on an ongoing basis. To ensure a professional and unbiased assessment, we will ask candidates to perform a combination of logical reasoning and personality tests as part of the process.

Lovable Labs Sweden AB

TL;DR As one of the first IT hires at Lovable, you'll be part of the backbone that keeps our people productive and our office running smoothly. This is a hands-on IT role with a builder's mindset, where you'll use AI and automation to unblock our team fast. Why Lovable? Lovable lets anyone and everyone build software with any language. From solopreneurs to Fortune 100 teams, millions of people use Lovable to transform raw ideas into real products - fast. We are at the forefront of a foundational shift in software creation, which means you have an unprecedented opportunity to change the way the digital world works. Over 2 million people in 200+ countries already use Lovable to launch businesses, automate work, and bring their ideas to life. And we're just getting started. We're a small, talent-dense team building a generation-defining company from Stockholm. We value extreme ownership, high velocity, and low-ego collaboration. We seek out people who care deeply, ship fast, and are eager to make a dent in the world. What We're Looking For At least 2 to 4 years of experience in an IT support, sysadmin, or technical operations role at a tech company Experience managing vendor relationships, including negotiating costs and evaluating features Experience leading multi-stakeholder projects Strong troubleshooting skills in macOS or Linux environments A proactive, service-minded attitude with a track record of ownership and follow-through Experience with MDM tools (Iru/Knadji in particular) is a plus Familiarity with professional software development tools is a plus What You'll Do In one sentence: You'll touch the full spectrum of IT operations, from device lifecycle and hands-on support to event production and security partnerships, using AI and automation to keep every team member unblocked and productive. Serve as the first point of contact for hardware and software issues, triaging and resolving support tickets promptly Own the full device lifecycle: procurement, automated provisioning, configuration, maintenance, and decommissioning Actively automate repetitive support tasks using AI tools and scripting, and maintain documentation that enables team self-service Track and manage the company's hardware inventory, ensuring consistent standards across the organization Provide on-site IT support and work with internal and external events, including AV setup and pre-event coordination, to prevent technical issues Partner with the Security team to protect our fleet while keeping the developer experience smooth Note: This is an office-first position not suitable for remote work How to Apply Please submit your application in English, which is our working language at Lovable. We’re committed to fair and equal treatment for all candidates. If you’re interested, apply via our careers portal

Tacton Systems AB

About the Role We are looking for a Security & Compliance Engineer to help ensure security across our internal digital landscape. Reporting to Tacton’s Security & Compliance Manager, you will play a key role in ensuring that our systems, integrations, data flows, and vendor ecosystem are secure by design and in operation. This role focuses on internal systems and corporate security architecture, including infrastructure, integrations, and third-party services. You will combine architectural thinking with hands-on expertise and act as a trusted partner to IT, Engineering, and business stakeholders. You will have a direct impact on how we design, connect, and secure our systems as we continue to grow globally. This is a high-impact role for someone who understands modern digital environments and how to secure them end-to-end. What You Will Do Internal Security & Risk Lead security assessments of systems, integrations, and data flows Conduct technical risk analyses for system implementations and vendor onboarding Perform threat modelling and security reviews Define and implement security requirements for infrastructure and cloud environments Help establish and maintain security guardrails across identity, access, encryption, and integrations Proficiency in risk management Knowledge of emerging cybersecurity threats and trends Vendor & Third-Party Security Define and enforce security requirements in procurement processes Conduct supplier security assessments and due diligence Evaluate third-party risks from a cybersecurity perspective Governance & Compliance Maintain alignment with ISO 27001 and SOC 2 Type II Contribute to policies, standards, and security guidelines Support incident investigations Act as a subject matter expert in audits and internal forums What Will Help You Thrive 5+ years of experience in cybersecurity, information security, or a related field Strong technical foundation in cloud, networking, identity & access management, and system integrations Strong communication and stakeholder management skills Experience conducting technical risk assessments and security reviews Familiarity with ISO 27001 and SOC 2 Type II Ability to understand complex system landscapes and data flows Comfortable working cross-functionally with IT, Engineering, and Legal Certifications such as CISSP, CISM, or CISA are a plus Degree in Computer Science, Engineering, or a related field Who We’re Looking For We’re looking for someone with a strong hands-on, doer mentality who is focused on getting things done and creating real impact. You are pragmatic, prestigeless, and motivated by outcomes. You thrive in dynamic environments where responsibilities are broad, and you feel comfortable navigating uncertainty and solving problems independently. You are curious by nature, proactive in your approach, and continuously looking to learn and improve both yourself and the way things are done. Why Tacton? At Tacton, we’ve been building CPQ software for over 20 years. We’re a stable company with global customers and a product that’s central to how manufacturers sell We offer competitive benefits, flexibility in how we work, and a culture that values learning and collaboration A solid and stable company with over 20 years of industry experience. Flexible hybrid setup - 3x a week at the office 33 days of paid time off – 30 vacation days plus 3 extra to make sure you get the rest you deserve. Premium occupational pension – Our pension plan goes beyond ITP1, with higher employer contributions depending on your age and salary level. Generous wellness allowance – 5,000 SEK annually to support your health and wellbeing. Private healthcare insurance – Skip the waiting lines and get quick access to private medical care, including specialist consultations and treatments. Parental leave top-up – We top up your parental leave so you receive up to 90% of your base salary for up to 6 months, helping you focus on your family without financial stress Weekly treats – Fika one week, breakfast the next, because good food brings people together. This role is based in Stockholm, where we have invested in creating our unique home right next to Hötorget station. Tacton is a leading Software as a Service company trusted by global manufacturers. We got started in the late 1990s when six computer scientists figured out a revolutionary way to help Manufacturers overcome their most business-critical, product configuration challenges. Since those early days, we have grown to support global manufacturers seeking to thrive in a changing world. We invite you to find out more about us @ www.tacton.com/about