Information Security Engineer

About Consilium Safety Group At Consilium Safety Group, we don’t just build technology, we create solutions that protect people, assets, and the planet. As a global leader in fire and gas safety, we serve critical industries such as marine, energy, rolling stock, and infrastructure. With more than 100 years of expertise, we combine deep industry knowledge with cutting-edge innovation to shape the future of Safety Tech. Headquartered in Gothenburg, Sweden, and operating in over 55 locations worldwide, we are a fast-growing global organization backed by Antin Infrastructure Partners. With strong financial support and a clear strategic vision, we are on an ambitious journey of growth and transformation, investing in innovation, operational excellence, and talent. This is an exciting time to join us. We are now looking for an Information Security Engineer to join the information security team at Consilium! About the Role As an Information Security Engineer at Consilium, you will combine hands-on security operations with strategic governance and compliance work. In practice, the role is split into two central pillars: Operational Excellence: Working hands-on to implement security controls, managing daily security activities, and acting as an internal subject matter expert. Strategic and Compliance-Oriented Leadership: Developing and driving our security strategy, ensuring we meet regulatory requirements, and continuously strengthening our security posture. You will help protect Consilium’s information assets, lead compliance efforts related to NIS2, and support alignment with frameworks such as NIST CSF, ISO 27001, the EU CRA, and the AI Act. The role works closely with teams across IT, HR, R&D, Sales, and Marketing. Your Main Responsibilities In this role, you will manage day-to-day security operations activities as well as strengthening the ISMS, implement controls aligned with ISO 27001, NIS2, and NIST CSF, coordinate audits, develop policies, and provide risk reporting and advisory support across the business. Qualifications and Experience To succeed in this role, you bring strong technical security knowledge, incident-handling capability, and an interest in governance and compliance. Requirements Technical Environment: Solid understanding of Microsoft Defender suite, Azure/O365, Windows, and Linux. Networking & Security Tools: Strong knowledge of TCP/IP, segmentation, firewalls, SIEM, EDR/EPP, and patch management. Automation: Basic to intermediate scripting skills (PowerShell, Python, Bash, KQL, or Graph API). Incident & Frameworks: Experience with log analysis, incident lifecycles, and frameworks like ISO 27001 or NIST CSF. Communication: Ability to explain technical security concepts clearly to non-technical stakeholders. Meriting Hands-on experience with Microsoft's advanced security stack (Sentinel, XDR, Entra, Intune, Purview/Priva). Cloud security controls (Azure), DevSecOps (GitHub Advanced Security), or direct audit-evidence …