Essential requirements:

• Typically, 5+ years in cyber security
• Typically, 7+ years in governance, risk management, compliance and/or resilience
• Applicable educational background within GRC and/or information and cyber security (e.g. a university degree or
a diploma from a higher vocational education) or equivalent work experience
• Good knowledge of regulatory compliance - preferable on a global market
• Good knowledge of cyber security best practises and standards (e.g. ISO 27001, ISO 31000, ISO 22301, NIST
800, C2M2, CMMC)
• Proven track record in managing risk in a global enterprise
• Experience designing, implementing and governing cyber security frameworks
• Experience working with auditors and QSA's in security assessments and certification processes
• Strong communication and collaboration skills
• Experience from driving security awareness activities and building security culture
• Proven skills in change management
Other qualifications/optional certification
• CISM, CISSP, CCISO or equivalent certification in information and cyber security
• ISO 27001 Certification (e.g. as Lead Implementor or Lead Auditor)
• Certification in Business Continuity Management (e.g. CBCP orISO 22301



Please explain how you meet all the requirements when applying.

Utilization: 100%
Location: Stockholm
Period:  05-01-2026-31-08-2026
Last day to apply: 29-12-2025
We present regularly. This means that we sometimes remove the assignements from our website before the final application deadline. If you are interested in an assignement, we recommend that you submit your application as soon as possible.