Head of Information Security

Head of Information Security About the Assignment We are looking for a senior information security professional to lead and coordinate the organisation’s information security work. The role focuses on identifying, assessing and managing information and cybersecurity risks in a structured and risk-based way. The Head of Information Security translates security risks and regulatory requirements into practical requirements, priorities and actions for the business, IT, projects and suppliers. The role also provides management with relevant security advice and decision support, ensuring a clear understanding of significant security risks and priorities. Responsibilities Drive the Information Security Agenda Maintain and develop the information security framework, requirements and ways of working. Identify significant security risks, gaps and improvement needs, and drive them towards resolution. Follow up on security risks, incidents, deviations and agreed improvement actions. Create and maintain relevant governing documents as part of an Information Security Management System (ISMS). Assess Risks and Advise the Organisation Perform or facilitate information security risk assessments. Support business and IT teams in translating identified risks into appropriate security measures. Advise management and accountable owners on significant security risks, priorities and decisions. Define and Review Security Requirements Define and maintain security requirements for IT solutions and digital services. Review solutions, projects and significant changes from an information security perspective. Provide practical security advice to architects, IT teams, projects and the business. Ensure Security in Procurement and Supplier Management Define security requirements for procurement and contracts. Assess security risks related to suppliers and proposed solutions. Follow up on identified supplier security gaps and agreed remediation actions. Coordinate and Report on Security Coordinate information security activities across IT, the business, Compliance, Procurement and other relevant functions. Provide management with a clear overview of significant security risks, issues and priorities. Escalate material security risks when necessary. Responsibility Boundaries The Head of Information Security owns the information and cybersecurity expertise, requirements and security assessments. The role contributes security expertise to privacy and compliance activities but does not assume the legal or data protection responsibilities of Group Compliance. Business and management risk ownership remains with the established accountable roles. Required Profile We are looking for a senior information security professional who: Has solid experience in information and cybersecurity within a larger decentralised and/or international organisation. Can work both strategically and hands-on with security governance, requirements and risk assessments. Can translate technical and regulatory issues into understandable business risks and practical actions. Can influence and coordinate stakeholders across IT and the business. Understands relevant cybersecurity regulations, including NIS2-related requirements and GDPR security measures. Communicates clearly with both technical specialists and senior management. Has an analytical and solution-oriented approach. Is fluent in Swedish and English. Other info: Background check is mandatory before starting this assignment