We now have a new requirement and are looking for a consultant colleague with the qualifications listed below. The position is part of our consulting business, which means you will be employed by us and work either with clients or on internal projects and assignments.

As part of your application, you may be presented to clients/partners as part of the recruitment process. If selected for the assignment, you will be employed by us and work either with clients or on internal projects and assignments as part of our consulting business.

Role:
Ensure the governance structure and security steering documents are accessible, clearly understood, and adopted across all levels of the organization.

Conduct and oversee comprehensive cyber risk assessments at both enterprise and

operational levels; maintain and regularly update central risk registers enabling risk informed decision-making.

Develop audit and control testing schedules, and ensure systematic evaluation of compliance levels and control effectiveness.

Drive a culture of continuous improvement by identifying and introducing more effective and efficient controls and processes across the cyber security domain.

Collaborate regularly with internal departments and external stakeholders, including third-party vendors, to manage cyber security risks and ensure alignment with internal standards and contractual obligations.

Act as a visible ambassador for cyber security, making complex security topics

understandable and accessible to all employees.

Essential requirements:
• Typically, 5+ years in cyber security in a global enterprise

• Typically, 3+ years in governance, risk management and compliance

• Applicable educational background within GRC and/or information and cyber security (e.g. a university degree or a diploma from a higher vocational education) or equivalent work experience

• Good knowledge of regulatory compliance - preferable on a global market

• Good knowledge of cyber security best practises, standards and maturity models (e.g. ISO 27001, ISO 31000, ISO 22301, NIST CSF, C2M2)

• Proven track record in risk management and in reporting for global enterprises

• Experience designing, implementing and governing cyber security frameworks

• Experience working with auditors and QSA's in security assessments and certification processes

• Strong communication and collaboration skills in English

• Proven skills in change management

• Experience from driving security awareness activities and building security culture

• CISM, CISSP, CCISO or equivalent certification in information and cyber security

• ISO 27001 Certification (e.g. as Lead Implementor or Lead Auditor

Last day to apply: 27-02-2026


About Us
We currently employ experienced consultants in areas such as System Development, AI, Machine Learning, Testing, Cloud, Infra DevOps, and IT Project Management.

Working at Deploja is something entirely different from working at an ordinary consulting company—and we are really proud of that. So, what makes us unique?

We simply offer more than just a high salary and greater freedom; that’s just the beginning. With us, you’ll find the work environment and opportunities you deserve. Welcome to Deploja, where the grass is indeed greener!

Vi erbjuder dig följande, Valet är ditt!

🚀 Exciting assignments with our many clients. We focus on long-term projects, which gives you the opportunity to create value for the client while also developing yourself.

🌟 A secure monthly salary – together we’ll agree on a base salary depending on your assignments.

🚗 Company car – we encourage you to choose an electric car for a more sustainable future.

💼 Occupational pension and great opportunities for salary conversion.

🌴 Vacation – Would you like more than 30 days of vacation, perhaps 60 days?

🏥 Private health insurance, accident insurance, and life insurance for increased security.

📚 Skills development – you set your own budget and choose the training you wish to attend.

🕑 Quality of life – Are you struggling to balance everyday life and wish to work a little less while still earning as much, if not more?

We handle applications continuously, and due to the high workload, it's especially important to include a short motivation for the position, explaining how you meet the requirements.