Information Security Officer (Cybersecurity)

Location: Stockholm, hybrid. Applicants must have Swedish citizenship, citizenship in an EU country, or a Swedish work permit.

Company

hirify.global is a cybersecurity company focused on preventing cyber breaches and minimizing their impact, with around 400 employees and capabilities spanning prediction, prevention, protection, response, and recovery.

What you will do

• Support the business on information security, privacy, requirements interpretation, and security technology initiatives.
• Communicate with stakeholders and respond to security requirements in RFPs and questionnaires.
• Coordinate incident management, monitoring, and security measures with the SOC and IT SecOps teams.
• Use AI to improve Global Security and Compliance processes and support organizational decision-making.
• Conduct annual internal ISO 27001 audits and participate in external audits.
• Manage risks, monitor regulatory changes, and keep governing documents aligned with legal, regulatory, and contractual requirements.

Requirements

• Solid experience in IT or information security from a consulting, audit, or line role, with a current understanding of the cyber threat landscape.
• Ability to assess emerging threats and translate them into priorities, proportionate controls, and practical improvements.
• Understanding of modern security architectures and technologies, including cloud security, identity and access management, vulnerability management, and detection and response.
• Strong communication and stakeholder management skills.
• Experience implementing and governing an Information Management System.
• Familiarity with NIST, CIS 18, ISO 27001, SOC 2, and PCI DSS frameworks.
• Proficiency in security audits, assessments, and risk management.
• Strong analytical and report-writing skills.
• Proficient Swedish and English, written and spoken.
• Swedish citizenship, citizenship in an EU country, or a Swedish work permit is required.

Nice to have

• Relevant certifications such as CISSP, MCSE, or CIPP/E.
• Experience implementing ISO 27001 in an organization.
• Legal education or legal experience.
• Knowledge of GDPR, the NIS Directive, and the Protective Security Act.
• Experience with incident response, continuity management, and crisis management.

Culture & Benefits

• Work with a global security and compliance function in a leading Nordic cybersecurity provider.
• Collaborate with specialists across SOC, incident response, protective security, human threat intelligence, and threat intelligence.
• Participate in initiatives focused on cyber resilience and protecting society from cyber threats.