CDON AB · Stockholm
Information Security Specialist
Want to shape the entire information security landscape behind one of the Nordics’ most well-known e-commerce marketplaces? At CDON Group, security is a strateg...
Want to shape the entire information security landscape behind one of the Nordics’ most well-known e-commerce marketplaces?
At CDON Group, security is a strategic foundation for our growth, data-driven operations, and future innovation. We’re now strengthening our security capabilities and are looking for an Information Security Specialist who wants to take ownership, drive development, and ensure that security is embedded across our products, platforms, and teams.
About us
Join us at CDON Group, a Swedish listed company with a long history and extensive experience in the e-commerce market. Our mission is to unleash the power of the marketplace to give the best shopping experience in the Nordics.
We are dedicated to providing great online shopping experiences and are on the lookout for an Information Security Specialist to join us on this journey for our two Nordic marketplaces: CDON and Fyndiq.
About the role
This role combines hands-on security work with broader ownership of how we structure, govern, and communicate information security across the company. You will sit within IT but collaborate closely with Legal, Finance etc, as many topics touch on compliance, GDPR, NIS2, the AI Act, and regulatory inquiries.
At the same time, we are navigating a unique balance. We are pragmatic, entrepreneurial, and fast-moving, yet also a publicly listed company with expectations on governance, compliance, and structure. This creates an environment where you will help build processes that do not fully exist today, while still working close to the business and making real impact quickly.
Some areas of focus include:
Helping build security processes and routines, both maintenance and from the ground up
Supporting the entire organization with practical, understandable security guidance
Working with both technical and non-technical stakeholders
Helping raise security maturity while keeping the business moving forward
Responsibilities include
You will have both structured responsibilities and day-to-day practical tasks.
Key areas include:
Developing and maintaining information security policies, governance, and documentation
Driving risk management activities across systems, suppliers, processes, and new initiatives
Ensuring alignment with frameworks such as ISO 27001, NIS2, and GDPR
Collaborating closely with Legal on data protection, AI governance, and regulatory communication
Supporting IT, infrastructure, and engineering teams with operational security tasks
You will also work hands-on with:
- Google SecOps and our existing tooling
- Vulnerability management
- Access and identity management
- Coordinating external penetration tests and understanding results
- Leading internal training, awareness efforts, and phishing exercises
Part of the role also involves presenting findings and explaining why security requirements exist — not just what they are — in ways that engage and motivate colleagues across the business.
Qualifications and requirements
We are looking for someone who can understand, interpret, and communicate both technical and regulatory requirements.
Relevant experience and traits include:
A couple of years in information security, IT security, or data protection
Relevant degree for the role
Understanding of GDPR, NIS2, and IT risk work
Strong communication and presentation skills
The ability to learn and work with security tools such as Google SecOps
Full professional proficiency in Swedish and English
Pragmatic mindset and the ability to balance speed with governance
Ability to work regularly from Stockholm to collaborate effectively with Legal and support incident handling
Some tasks require hands-on IT security understanding, but you do not need to be a programmer. Support is available from backend teams for highly technical areas.
What we offer
An opportunity to be part of a unique growth journey, actively contributing to the success of the leading e-commerce marketplaces in the Nordics.
A collaborative and dynamic work environment, with passionate colleagues who believe in CDON Group’s mission
Competitive compensation package, including benefits such as pension and insurance through Max Matthiessen and MyBenefit portal.
Career growth opportunities within a rapidly evolving company.
Application Process:
Please attach your resume and a brief cover letter outlining your interest and suitability for the job. We will be conducting interviews with candidates on an ongoing basis.
To ensure a professional and unbiased assessment, we will ask candidates to perform a combination of logical reasoning and personality tests as part of the process.
Role
Information Security Specialist
Category
Data/IT
Employment type
Heltid
Locations
Published
April 2
Deadline
September 30