Information Risk and Compliance Officer

Assignment description We are looking for an experienced Information Risk and Compliance Officer to act as an Information Security Officer within Production & Logistics. The assignment combines strategic and operational information security governance with risk management, compliance and structured documentation. In this role, you will help strengthen security processes, support risk assessments and ensure that procedures, guidelines and documentation are clear, accurate and aligned with security requirements and the organization’s Information Security Management System, ISMS. You will work closely with the Cybersecurity Manager and stakeholders across Production & Logistics, including production units, IT, maintenance and logistics functions. The role requires a structured and proactive approach, with the ability to drive activities independently while coordinating across technical and operational stakeholders. Your responsibilities include supporting the continuous improvement and implementation of the ISMS, performing and following up on IRAM assessments, contributing to information security governance and maintaining security-related documentation, reports and presentations. You will also review and improve shopfloor IT procedures and guidelines, coordinate the network of Local Information Security Officers, LISOs, and support stakeholders in understanding information security and compliance requirements. In addition, you will help assess the implications of the Cyber Resilience Act, CRA, for Production & Logistics and ensure that security-related governance and documentation remain structured, consistent and aligned with the ISMS. Qualifications: You have a relevant academic degree or equivalent professional experience within information security, cybersecurity, risk management, compliance or a related field. You have experience working with information security, cybersecurity support, risk management or compliance-related activities. You have experience with information security governance, risk and compliance activities. You have experience supporting governance processes, documentation activities and coordination of security-related work. You have experience supporting or implementing structured security processes and ways of working. You have experience conducting or supporting risk assessments and associated follow-up activities. You have strong documentation and analytical skills, with the ability to structure complex information clearly. You have a strong ability to develop, review and improve security-related procedures, guidelines and documentation. You can translate complex security and compliance requirements into clear and practical documentation. You are able to work effectively with both technical and operational stakeholders. You can coordinate activities across multiple stakeholders, functions and organizational areas. You have strong stakeholder management and communication skills. You are fluent in Swedish and English, both spoken and written. You have a strong ability to produce professional documentation and deliverables in English. You can independently structure, prioritize and drive assigned activities forward. Meriting Experience ISO 27000 certification and/or practical experience working with ISO 27001 frameworks. Knowledge of the Cyber Resilience Act (CRA) and NIS2. Experience working with Cybersecurity Management Systems (CSMS). Experience from industrial, production, or manufacturing environments. Experience working with IT/OT environments. You are a structured and detail-oriented information security professional with strong analytical skills and a clear focus on quality. You take a proactive and solution-oriented approach and are comfortable taking ownership of your work while collaborating closely with stakeholders across different functions and areas of expertise. You communicate clearly with both technical and operational stakeholders and are able to translate complex information, security requirements and governance needs into structured and understandable documentation. You are comfortable managing multiple parallel activities and maintain a high level of accuracy and quality in both documentation and governance work.