Information Security Specialist at Tingstad

Do you thrive in a role where you get to combine structure, documentation, and business-focused security work? Then this could be the role for you! Your future employer Tingstad was founded in Gothenburg in 1959 and has grown to become one of the Nordic region's leading suppliers of consumables and equipment for businesses. Today we have approximately 500 employees with sales offices in 13 cities, but our culture remains the same: family-oriented, long-term, and customer-focused. We serve businesses in restaurants, specialty retail, grocery retail, and many other industries. Our vision is clear: to create a simpler everyday life for our customers' operations through the right assortment, high service levels, and efficient deliveries. Whatever you need: We have it. Learn more here: https://www.tingstad.com/se-sv/om-oss What does the role offer? This is a key role where you get to be part of developing Tingstad's work in information security, cybersecurity, and regulatory compliance. The organization has come a long way in practical security work and has strong technical expertise internally. Now we're looking for someone who can create structure, ensure documentation, and drive work on processes and compliance. You will work closely with the IT department and serve as the link between operations, technology, and regulations. The role is both strategic and operational – you identify what needs to be done, but also ensure it actually gets done. You will be responsible for developing and maintaining policies, procedures, and processes, and ensuring that the organization meets requirements including NIS2, ISO 27001, GDPR, and upcoming regulatory requirements. Examples of work tasks: Manage and further develop the company's information security work. Drive work with NIS2, ISO 27001, and other relevant regulations. Develop, document, and maintain policies, processes, and control documents. Conduct risk analyses and follow up on internal security processes. Plan and conduct Security Awareness training for the organization. Follow up on security tools, penetration tests, and security-related deviations. Coordinate internal audits and ensure compliance. Provide support to the business on information security and compliance matters. Collaborate with external suppliers and security partners as needed. Who are you? We're looking for someone with experience in information security, IT security, or GRC work who thrives on creating structure and driving improvements. You have worked with policies, processes, and documentation and have a good understanding of how information security translates into practice. You don't need to be the one conducting technical penetration tests yourself, but you have sufficient technical understanding to engage in dialogue with specialists and translate technical security requirements into functioning processes and working methods. As a person, you are structured, unpretentious, and action-oriented. You like to get things done and have a good ability to build trust in the organization. You are communicative and pedagogical and enjoy working in a role where you collaborate with many different functions. We also believe you have a pragmatic approach – you understand the importance of structure and compliance, while also having the ability to find solutions that work in the business. We would like to see that you have: Experience in information security, IT security, or GRC. Experience working with ISO 27001, NIS2, or similar frameworks. Experience writing and implementing policies, procedures, and processes. Experience with risk analyses, internal controls, or compliance. Good general understanding of IT infrastructure and security tools. Very good skills in Swedish and English. Is this your perfect match? At Tingstad you get the opportunity to build and further develop an important area in a growing and forward-thinking organization. You get a broad and varied role with significant responsibility where you work closely with both the business and the IT department. Here you get the opportunity to influence how information security work moves forward, while becoming part of an engaged team with high expertise and short decision-making processes. For someone who wants to combine structure, business development, and information security, there are excellent opportunities to develop together with the company. Warmly welcome to apply Does the position sound interesting? Welcome to submit your application via effektiv.se. Interviews will be held on a rolling basis. If you want to know more about the position, please contact Markus Nordbring at [email protected] About Team Effektiv Since 2013, Effektiv has helped candidates and companies find the right fit through sustainable recruitment and a top-class recruitment experience, something confirmed by the awards Company of the Year and Career Company of the Year. With roots in the team spirit of sports, Effektiv's work is permeated by the core values Happy, Exploratory, Long-term, and Driven (GOLD), with the goal of taking gold together with candidates, consultants, and customers. Every day. This is a direct recruitment, which means Effektiv is responsible for the recruitment process and you will be employed directly by the client company. Keywords information security, cybersecurity, cyber security, data security

Ask AI

Common questions about this listing — opens your AI with a ready-made prompt including the listing link.

• Is the salary in this job offer competitive for the role and location?
  Open in
• What questions should I ask at the interview for this position?
  Open in
• Which skills should I highlight in my application for this job?
  Open in