IT Security & Risk Officer (Cybersecurity)

TL;DR

IT Security & Risk Officer (Cybersecurity): Supporting cybersecurity governance and ISMS coordination for a mature ISO 27001 certified environment with an accent on audit planning and compliance. Focus on maintaining ISMS documentation, coordinating internal and external audits, and quality assuring risk assessments.

Location: On-site in Göteborg, Sweden (Lindholmen)

Company

hirify.global is an IT and technology consulting company providing specialized expertise in software development, SAP, and electronics for complex Swedish projects.

What you will do

• Coordinate and maintain ISMS documentation, plans, and security activities.
• Plan and coordinate internal ISO audits and external certification audits.
• Manage audit calendars, action tracking, evidence collection, and reporting.
• Support gap analysis and continuous improvements as new standards are introduced.
• Ensure compliance with ISO 27001, NIS2, and UNECE R155/R156.
• Quality assure risk assessments and TARAs led by other team members.

Requirements

• 3–5 years of experience in IT security, Governance, Risk and Compliance (GRC), or security compliance.
• Proven experience working with ISMS and audits in an ISO certified environment.
• Strong organizational, coordination, and follow-up skills.
• Solid understanding of risk management and threat analysis.
• Professional proficiency in English.

Nice to have

• Exposure to NIS2, GDPR, CRA, or UNECE R155/R156.
• Experience working within agile environments.
• Experience in incident response.