Head of Information Security – Stockholm

Head of Information Security – Stockholm Are you an experienced information security professional ready to take a leading role in strengthening cybersecurity governance and risk management? We are looking for a senior specialist who can combine strategic security leadership with hands-on execution in a complex organisation. 💼 About the Assignment We are looking for a Head of Information Security for a consulting assignment in Stockholm. In this role, you will lead and coordinate information security activities across a large organisation, ensuring that cybersecurity risks are identified, assessed and managed through a structured, risk-based approach. You will work closely with senior management, IT, business functions and external suppliers to translate security requirements and regulatory obligations into practical measures and clear priorities. The position offers the opportunity to influence security governance, strengthen organisational resilience and contribute to the continuous improvement of information security processes. 🎯 Key Responsibilities Lead and develop the organisation's information security framework, policies and working methods. Identify, assess and manage information security and cybersecurity risks. Maintain and improve the Information Security Management System (ISMS), including relevant policies and governing documents. Conduct and facilitate security risk assessments and recommend appropriate mitigation measures. Monitor security incidents, deviations, identified risks and improvement initiatives. Define and review information security requirements for IT systems, digital services and projects. Provide security guidance to architects, IT teams, project managers and business stakeholders. Establish security requirements for procurement processes, contracts and supplier relationships. Assess supplier security risks and follow up on remediation activities. Coordinate information security initiatives across IT, Compliance, Procurement and business functions. Present security risks, priorities and recommendations to senior management. ✅ Requirements We are looking for someone who has: Extensive experience in information security and cybersecurity within a large, decentralised and/or international organisation. Strong experience in security governance, information security frameworks and risk assessments. Practical experience developing and maintaining an Information Security Management System (ISMS). The ability to translate technical security risks and regulatory requirements into clear business priorities and actionable measures. Experience defining security requirements for IT solutions, digital services and organisational changes. Experience assessing supplier security risks and supporting security requirements in procurement and contracts. Strong stakeholder management skills and experience collaborating across IT, business functions and senior management. Good understanding of cybersecurity regulations, including NIS2 …