Search results for "ISMS"

Westermo Network Technologies AB

Are you an Information Security specialist? Are you ready to take on an overall responsibility and drive the IS area in a global business? Join us as our new CISO! As our world changes, Information & Cyber Security are becoming increasingly important for a company such as Westermo. We have long been known for robust hardware, and increasingly so also for Cyber Security features in our software. Information Security at Westermo is not, and should not be an isolated IT function. It is fundamental to trusted products, resilient operations, and long‑term customer confidence. We are now looking for a Global Chief Information Security Officer (CISO) to define, lead, and govern our global cyber security agenda across the entire global organization. This is a diverse role, with operational and strategic aspects. Governance, risk management, and operational resilience are key focus areas. In this global role, you will work across all levels; from the executive management team, our leaders, and key functions across Westermo’s global operations. You will collaborate with IT, R&D, Manufacturing, Operations & Quality to ensure information security is embedded into decision‑making, processes, and culture across the company. Are you our next Global Chief Information Security Officer (CISO)? As Global CISO, you oversee all Information Security related issues. You are the domain expert, the advisor and coordinator. You make sure that Westermo follows IS laws, directives, standards and also set up our own strategy, policies and guidelines. You lead the work and influence people in all departments, making sure we have the right routines, trainings, risk assessments and pass our audits. You will not be starting from a clean slate, but there will be large opportunities to challenge current state and shape the future. Key Responsibilities Advise on identification, assessment, and prioritization of cyber risks across Westermo Provide direction and governance for the Information Security Management System (ISMS) in accordance with ISO 27001, including audits and scope expansion across Westermo companies Support compliance with applicable cyber security regulations and standards (e.g. ISO 27001, IEC 62443, NIS2, customer security requirements) Provide oversight and advisory input on third‑party and supply‑chain cyber security risks Create awareness, teach and train others in the organization. Report regularly to executive management on cyber security posture, risks, incidents, and initiatives Who Are We Looking For? We are looking for someone who has experience in Information Security. You might be an expert in one area of Information Security, but you are looking for a wider role. Or you are already working with broad topics, but are looking for more responsibility, and the opportunity to make your own mark on a role and organization. You like it in a medium sized company; where there’s room for influence, and not hierarchical and bureaucratic. You appreciate having different kinds of competence around you, and are comfortable being the expert in your own area. You can speak to all of your stakeholders, and meet them where they are; from executive management to customers and employees. You are also comfortable in a global company; English is not a problem for you, and you understand there will be differences between countries, even if you don’t know exactly what they are. In short; you are an Information Security Specialist who wants to get in the driver’s seat, with your supporters in the seats next to you. Requirements You are familiar with ISO 27001 and NIS2. Strong knowledge of both IT security and OT/ICS security in industrial environments Great communication skills, being able to teach and train others, but also learn from other specialists in the organization. Proven experience with Information Security governance, risk management, and incident response Meritorious Background from industrial, manufacturing, R&D, or mission‑critical system environments Relevant certifications (e.g. CISSP, CISM, or equivalent) Interest or experience in digital transformation and data governance In Return, We Offer: You will be working at the forefront of technology in a friendly, open culture where you get the opportunity to learn from skilled colleagues every day. A mature and caring leadership in a flat organization. Through our collective agreement you will be covered in terms of insurance, pension and other benefits. We like to have fun together and we regularly enjoy sports and other social activities as a team. We believe that magic happens when people meet. We are a learning organization and we truly love to try new things, think outside the box and be innovative together! Basic Information Location: Västerås, Sweden (preferred) or other Westermo locations Job type: Full‑time Employment contract: Permanent Application: We review applications continuously — apply as soon as possible Contact: Hiring Manager: Johan Inestam, CFO, at johan.inestam@westermo.com Recruiter: Elin Sandell, at elin.sandell@westermo.com About Westermo Westermo is a leading provider of Industrial Data Communications equipment to the global market. Sales are conducted through our own offices in key markets in Europe, North America, Australia and Asia, as well as through distributors and OEM customers worldwide. Development and manufacturing take place in Sweden, Ireland, Germany and Switzerland. Westermo was founded in 1975 and today has over 480 employees with a turnover of around 1 Billion SEK. The company is a wholly owned subsidiary of Ependion, listed on the Nasdaq OMX Nordic stock exchange.

Northmill Bank AB

Northmill Bank is a challenger bank at the intersection of technology and finance, committed to revolutionizing the way people manage and protect their financial well-being. We are creating a different kind of banking experience, digital yet personal. Northmill Bank was founded in 2006 and have grown to over 240 employees in 3 countries, 4 000 merchants and 600 000 end users. We use the latest technology to develop safe, smart, and user-friendly products for our customers. They are the sole reason why we do what we do. We are a 100% cloud-based product company where technology is the driver to create smarter banking products. Grab this opportunity to be a part of us and our journey! About the role The Information Security Officer is subject matter expert, and a member of the Information Security team in the second line of defense. The team is tasked to provide governance, oversight and guidance, meaning to ICT write policies, and monitor and control first line’s compliance towards these policies. The team also has a number of security capabilities that we provide ourselves, such as technical security scanners or security training activities. While the team’s primary responsibility is governance, oversight, this is a small bank and you will also play a hands-on role in driving security initiatives, designing procedures, and building security capabilities. You will directly influence the secure design of systems, support risk management, and respond to security incidents. Much of information security material needs a significant rewrite, so this role comes with a great opportunity to use prior experience to influence the Bank’s ways of working, risk appetite and ultimately its risk posture. You will have a blank canvas to modernize our security framework, moving us from legacy documentation to a lean, ISO 27001-aligned 'Version 2.0.' This is a rare opportunity to use your experience to directly shape the Bank’s ways of working, risk appetite, and long-term security posture. What you will do Translating information security requirements into practical, effective, and business-aligned policies, procedures, guidelines or strategies. Northmill is both a bank and payment provider in multiple European regions, and also has a number of business requirements affecting information security. Monitor compliance for our internal information security rules and our applicable business and regulatory requirements. DORA, GDPR, PSD2, FFFS, Visa, Swift, Swish, Bankgirot, Rixbanken, etc. Structure information security requirements in the ISMS in alignment with the ISO 27001 standard. Act as an advisor and lead for information, cyber security, or privacy incidents. Serve as a subject matter expert within privacy and data protection Act as subject matter expert in relation to our PCI-DSS certification and conduct readiness assessments towards the business. Keep track of that recurring tasks are performed as needed. Contribute to reporting towards supervisory authorities (e.g. SFSA, IMY, FIN-FSA) Ensure that the organization has relevant security awareness and training in place Lead and participate in Business Impact Analysis, ICT vendor approval, the Register of Information, Critical and Important functions, ICT Risk assessments, Data Protection Impact Assessments, IA-act risk assessments, NPAP, and various GAP analyses. What we are looking for Experience working as an Information Security Officer or in a similar role Hands-on experience in developing policies, procedures, and security frameworks A pragmatic mindset and a strong understanding of how to balance regulatory requirements with business needs Strong problem-solving skills and the ability to operate in a dynamic environment A collaborative approach and willingness to work closely with different parts of the organization Professional proficiency in both Swedish and English (Finnish or German is a plus) Based in Stockholm, with EU/EEA residency or citizenship Certifications such as CISM or ISO 27001 Lead Implementer are meritorious, but not required. What we offer A fantastic office in a prime Stockholm location with great spaces and views An independent role with the opportunity to make a real impact Great opportunities for professional development Health - 5 000 kr health care allowance Conference abroad every other year Breakfast and fruits every day, as well as "holy fika” each Friday Regular after work and celebrated successes at the office Apply today and be a part of Northmill!

Professional Galaxy AB

Professional Galaxy är ett IT- och teknikkonsultbolag som tillhandahåller högspecialiserad kompetens inom IT, mjukvaruutveckling, SAP, inköp, elektronik och mekanisk konstruktion. Vi samarbetar med erfarna seniora experter och levererar strategiskt värdeskapande kompetens till några av Sveriges mest komplexa och analytiskt krävande projekt. Vårt fokus ligger alltid på hög kvalitet, professionalism och tydliga, mätbara resultat. Vi söker nu en Informationssäkerhetsspecialist hos vår kund. Om uppdraget · Vidareutveckla, implementera och förvalta ISMS (ISO/IEC 27001) Genomföra riskanalyser, DPIA:er och andra konsekvensbedömningar Stödja verksamheten i frågor kopplade till GDPR och dataskydd Ta fram och uppdatera policys, riktlinjer och styrande dokument Säkerställa efterlevnad i projekt och förändringsinitiativ Planera och genomföra interna kontroller samt revisioner Hantera och utreda säkerhetsincidenter, inklusive personuppgiftsincidenter Bidra till ökad säkerhets- och integritetsmedvetenhet i organisationen Kravprofil Minst cirka 5 års erfarenhet inom informationssäkerhet, GRC eller dataskydd Dokumenterad erfarenhet av:GRC (Governance, Risk & Compliance) Praktiskt GDPR-arbete Riskhantering och intern styrning ISMS och ISO 27001 Erfarenhet av arbete i reglerad eller säkerhetskänslig verksamhet Förmåga att omsätta regelverk till praktiska arbetssätt Meriterande kompetenser Erfarenhet av DPIA, incidenthantering och registerförteckningar Internrevision och efterlevnadsuppföljning Leverantörssäkerhet och tredjepartsriskhantering Kunskap om regelverk såsom:NIS2 ISO 27001 CMMC Cyber Essentials Erfarenhet av säkerhetsarbete kopplat till exportkontrollerad information Personliga egenskaper Strukturerad och van att arbeta med styrning och regelverk Analytisk med förmåga att bryta ner komplexa krav Kommunikativ och pedagogisk i dialog med olika intressenter Självständig i leverans, men fungerar väl i samarbete Uppdragsperiod: 2026-06-01 till 2026-12-31 Är du rätt person för uppdraget, eller vill du rekommendera en stark kandidat? Tveka inte att kontakta oss. Ansök gärna redan idag, urval och intervjuer sker löpande Ansök genom att bifoga ditt CV (vi vill inte ha något personligt brev) och besvara urvalsfrågorna. Frågorna utgår från kravprofilen för den här rekryteringen och dina svar ligger till grund för det urval som sker i processen. Att besvara frågorna är en förutsättning för att din ansökan ska anses komplett. Vänligen notera att krav och eventuella meriter ska vara uppfyllda vid ansökningstillfället.

Avaron AB

About the Company At Avaron, you get the security of permanent employment combined with the variety of working at different customers. We place specialists across everything from tech, IT and industry to project management and business support – and whatever the assignment, you have a consultant manager who is there for you and your development. About the Role An organization is preparing for ISO/IEC 27001 certification and needs an independent internal audit of its Information Security Management System before the external certification audit. You will review how the ISMS works in practice, assess implemented information security controls, and provide a clear picture of certification readiness across two business operations. This role suits you if you enjoy combining structure, objectivity, and deep information security expertise. You will work closely with key stakeholders while keeping an independent perspective, and your findings will directly influence the next steps toward certification. It is a great opportunity to make visible impact on both compliance and security maturity. Job DescriptionYou will plan and execute two separate ISO/IEC 27001 internal audits within the defined ISMS scope. You will review the ISMS against ISO/IEC 27001 requirements and assess whether policies, procedures, and controls are implemented and effective. You will verify compliance with applicable Annex A controls based on the Statement of Applicability. You will evaluate risk management practices and how they support the overall ISMS. You will conduct interviews, review evidence, and build an objective assessment of current readiness. You will identify non-conformities, observations, and improvement opportunities in a clear and practical way. You will produce an audit plan, an audit report for management review, and a readout session for key stakeholders. RequirementsProven experience conducting ISO/IEC 27001 internal audits. Strong knowledge of ISMS implementation and audit practices. Relevant certifications such as ISO 27001 Lead Auditor, CISA, CISSP, or equivalent. Ability to work independently and provide an objective assessment. Fluent communication skills in Swedish and English. Nice to haveExperience working with organizations of similar size and complexity. What We OfferPermanent employment at Avaron AB Occupational pension Wellness allowance of SEK 5,000 per year Application Selections are made on an ongoing basis – apply as soon as you can.

HEMOCUE AKTIEBOLAG

Bring more to life. Are you ready to accelerate your potential and make a real difference within life sciences, diagnostics and biotechnology? Together with Danaher’s 15+ other operating companies, we unlock the transformative potential of cutting-edge science and technology to improve billions of lives every day. You’ll thrive in a culture of belonging where you and your unique viewpoint matter. And by harnessing Danaher’s system of continuous improvement, you help turn ideas into impact – innovating at the speed of life. HemoCue is a leading provider of point-of-care diagnostic solutions, enabling healthcare practitioners across clinical settings and geographies to improve patient outcomes and clinical workflows. For more than four decades we’ve been advancing what’s possible at the point of care. HemoCue offers point-of-care testing for hemoglobin, glucose and HbA1c as well as total and differential white blood cell count. The IT Compliance Officer for HemoCue is responsible for ensuring IT compliance, information security, and regulatory alignment across the organization, driving key programs such as ISMS, IT Software Validation, IT SOX, and NIS2 compliance. This position is part of the Procurement & IT organization located in Ängelholm, Sweden and will be primarily on-site with flexibility. At HemoCue, our purpose is clear: advancing care, test by test, everywhere. Care is the bedrock upon which we stand. It’s manifested in our devices, our people and how we interact with the world. You will be a part of the Procurement & IT function and report to Director Procurement & IT responsible for driving IT compliance, audit readiness, and information security initiatives. If you thrive in a cross-functional, fast-paced role and want to work to build a world-class compliance and governance organization—read on. In this role, you will have the opportunity to: Own and continuously improve the Information Security Management System (ISMS) Drive the IT SOX program including controls, testing, and remediation Act as NIS2 compliance lead and regulatory contact Maintain and improve software validation (GxP / CSV) processes Monitor and implement regulatory developments (NIS2, ISO27001) The essential requirements of the job include: Bachelor’s degree in Engineering, Computer Science, or related field or equivalent experience Some years of experience in IT compliance, IT audit, or information security Knowledge of regulatory frameworks such as NIS2, SOX, GxP/CSV, and risk management Familiarity with ISO 27001, ISO 13485, and GDPR Experience working in regulated and/or global environments It would be a plus if you also possess previous experience in: MedTech or other regulated industries Global matrix organizations Continuous improvement frameworks Join a winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life. For more information, visit www.danaher.com Hiring Manager: Malin Gartmyr, +46 734 14 05 07 Union Contact: Grgur Jamicic, Akademikerföreningen, +46 431 481 423 Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life. For more information, visit www.danaher.com.

Level Recruitment AB

mnemonic responds to the Nordic region’s most serious cyberattacks. We work side by side with Europe’s most important organisations and critical infrastructure to protect them from the cyberattacks they see today, and what they can expect to see tomorrow. At more than 450 employees in the nordics, we are amongst the largest pure play security companies in Europe, and continue to grow rapidly in Sweden and internationally. In addition, we are continually ranked by Great Place to Work as one of Europe’s top workplaces. Vill du arbeta i en roll där du kombinerar strategisk rådgivning med konkret påverkan i några av samhällets och näringslivets mest verksamhetskritiska miljöer? mnemonic stärker nu sin GRC‑verksamhet i Sverige och söker en Senior GRC Consultant som vill arbeta nära affären och vara med och vidareutveckla hur bolaget levererar rådgivning inom informationssäkerhet. Det här är en roll för dig som ser arbetet med GRC som mer än ramverk och dokumentation. Hos mnemonic handlar det om att omsätta styrning, risk och säkerhet till praktiskt värde i komplexa organisationer – där affär, teknik och säkerhet möts. Om tjänsten mnemonic är ett etablerat och växande europeiskt cybersäkerhetsbolag som arbetar med några av samhällets och näringslivets mest verksamhetskritiska miljöer. Bolaget är särskilt erkända för sina SOC‑ och MDR‑tjänster och arbetar dagligen med att skydda kunder mot några av de mest avancerade cyberhoten som finns idag. Som Senior GRC Consultant hos mnemonic får du en nyckelroll i leveransen av rådgivning inom Governance, Risk & Compliance (GRC). Du arbetar i nära dialog med kunder och stöttar organisationer i att etablera, utveckla och styra sitt informationssäkerhetsarbete i komplexa och affärskritiska miljöer. Rollen innebär att verka i uppdrag med hög komplexitet, ofta nära ledningsgrupper, där du omsätter risk, krav och strategi till strukturer, arbetssätt och konkreta förbättringar. Arbetet sker i nära samarbete med både affärs- och teknikfunktioner, och i många fall i miljöer där säkerhet är direkt avgörande för verksamhetens funktion. Du tillhör den svenska organisationen och arbetar nära Team Lead för GRC, samtidigt som du samarbetar med mnemonics etablerade kompetens inom området. I rollen som Senior GRC Consultant ansvarar du bland annat för att: Självständigt driva och leverera rådgivningsuppdrag inom informationssäkerhet och GRC, från analys till genomförande Omsätta regulatoriska krav och risker till strukturer, styrmodeller och praktiska arbetssätt Arbeta nära kunders ledningsgrupper i frågor kopplade till styrning, risk och mognad Planera och genomföra riskanalyser, security assessments och beredskapsövningar Bygga upp och vidareutveckla ledningssystem (ISMS) och stödja efterlevnadsarbete Samverka med både verksamhetsnära funktioner och tekniska team Bidra till utvecklingen av mnemonics GRC‑erbjudande Delta i kunddialoger och stödja i presale   Rollen innebär att arbeta parallellt i flera uppdrag där krav på struktur, kvalitet och prioriteringsförmåga är centrala. Tjänsten är placerad på vårt kontor i Sundbyberg, med möjlighet till ett flexibelt arbetssätt som kombinerar arbete från kontoret och på distans. Resor till vårt huvudkontor i Oslo förekommer.  Är det här du? För att lyckas i rollen ser vi att du har en akademisk utbildning inom exempelvis IT, informationssäkerhet eller motsvarande, samt några års erfarenhet av arbete inom informationssäkerhet och GRC, gärna i rollen som konsult. Du har praktisk erfarenhet av att arbeta med styrning, risk och efterlevnad och är van vid att omsätta ramverk till konkreta lösningar i verksamheter. Du har exempelvis erfarenhet av riskanalyser, policyarbete eller implementation av ledningssystem (ISMS). Du har god kunskap inom ramverk såsom ISO 27001, NIST eller liknande, och förståelse för hur dessa används i praktiken. Certifieringar såsom CISSP, CISM eller ISO 27001 Lead Implementer/Auditor är meriterande. Du har erfarenhet av att arbeta i kundnära eller verksamhetsnära roller och är bekväm i dialog med både ledning och tekniska team. Du kan strukturera ditt arbete självständigt och snabbt sätta dig in i nya miljöer. Som person är du strukturerad, analytisk och lösningsorienterad. Du är kommunikativ och förtroendeingivande, med förmåga att göra komplexa frågor begripliga. Du trivs i en roll med eget ansvar och drivs av att utvecklas och leverera kvalitet. Rollen kräver att du har mycket goda kunskaper i svenska och engelska, både i tal och skrift, samt giltig rätt att arbeta i Sverige. Vad vi erbjuder dig Hos mnemonic får du arbeta i en organisation där GRC är en viktig del av erbjudandet och där du får arbeta nära både kunder och tekniska specialister i komplexa uppdrag. Du blir en del av en miljö där strategisk rådgivning kombineras med djup teknisk kompetens, vilket möjliggör arbete i integrerade uppdrag där säkerhet är affärskritisk. Rollen innebär stort ansvar och möjlighet att utvecklas i takt med uppdragen. mnemonic erbjuder konkurrenskraftig ersättning, generös bonusmodell, möjlighet till aktieägande samt ett flexibelt arbetssätt. Företaget har under flera år rankats som en av Europas bästa arbetsplatser enligt Great Place to Work. Vi ser fram emot att ha med dig på vår resa framåt! Vill du veta mer? I denna rekrytering samarbetar mnemonic med Level Recruitment. Vänligen sök tjänsten genom att klicka på "ansök"-knappen här intill. Vid frågor vänligen kontakta rekryteringskonsult Stina Koskijev på 08-120 50 421 eller stina.koskijev@levelrecruitment.se (mailto:stina.koskijev@levelrecruitment.se). Vänligen notera att inga ansökningar tas emot via e-post.  Ansök gärna med CV där du tydligt beskriver vilka delar av rollen du har tidigare erfarenhet av.  Urvalet av ansökningar sker löpande. Välkommen in med din ansökan! Då vi är mitt i sommaren och semestertider vill jag göra dig uppmärksam på att vi inte kommer starta urvalsprocessen förrän vecka 34.