Information Security and Compliance Lead

📍Stockholm                                                                   📆 Flexible start date

👩🏽‍💻 Office/at-home balance                                           📚 Our Recruitment Process

Do you have legal experience and an enthusiasm for data security and privacy? Do you thrive on safeguarding sensitive data and building robust security protocols? If so, we want you on our team!

We are seeking a highly motivated and experienced Information Security and Compliance Lead to join our growing team. In this critical role, you will play a pivotal part in protecting our organization’s digital assets and ensuring compliance with relevant regulations.

WHAT YOU WILL BE DOING 

• Oversee and manage our information security and privacy programs and processes. This includes, for example, identifying and assessing potential security risks, implementing security policies and procedures, as well as ensuring compliance with relevant laws and regulations.

• Implement and maintain Identity and Access Management (IAM) solutions to control user access to critical systems and data.

• Assist with achieving and maintaining SOC2 and/or ISO 27001 certifications, and/or other relevant information security standards.

• Lead various information security and data protection initiatives to safeguard sensitive information and mitigate privacy and security risks.

• Collaborate with the legal, IT and Operations teams to analyze and handle security threats.

• Ongoingly conduct risk assessments to identify vulnerabilities and develop mitigation strategies.

• Partner with other business functions and teams to ensure alignment and compliance with internal and external security controls and regulatory requirements.

• Stay up-to-date on the latest cybersecurity threats, regulations, and best practices.

• Provide security awareness training and education to employees.

WHAT WE ARE LOOKING FOR 

• Degree in law with a specialization in privacy and/or information security and compliance. Relevant industry certifications are a plus (e.g. CISP, CISM).

• Minimum of 3 years experience in information security, cyber security, privacy and/or related fields.

• Proven experience with IAM solutions and access control methodologies as well as processes to assess and manage risk.

• In-depth knowledge of data protection laws and regulations (e.g., GDPR, CCPA).

• Familiarity with SOC2, ISO 27001 and/or other relevant security standards.

• Understanding of security risk management frameworks and methodologies.

• Excellent analytical and problem-solving skills.

• Strong communication, collaboration, and interpersonal skills.

• Ability to work independently and as part of a team.

• Passion for cybersecurity and data privacy.

• Fluency in one of the Nordic languages and English.

WHAT WE OFFER
You can read our full offering in our handbook.

• An intense learning environment where you will be able to grow and develop your skills and passions alongside some of the brightest minds in the industry.

• A culture that is built on collaboration, trust and innovation. We value having fun together – that’s why we also have regular afterworks, team events and a yearly festival.

• Transparent salary setting – the salary band for this role is 60 000 – 85 000 SEK/month.

• 30 days paid leave, flexible public holidays, parental pay, a solid pension scheme and key insurance. Our different offices also offer different perks such as massage, health care contributions, free book orders, healthy snacks & great coffee, ERP programs and your choice of PC or Mac.

• A diverse environment with a high focus on inclusion and belonging. We speak over 27 native languages around Precis and our internal inclusion score is 4.3 out of 5.

Next step

1. Application
2. Interview
3. Case interview
4. Your first day!