GRC Specialist in Information Security & GDPR/Privacy

Fellowmind Sweden AB · plný úvazek

Bruksgatan 1, Malmö, Švédsko

We are looking for a GRC Specialist for a brand new internal role where information security, GDPR, AI, and compliance converge. Here you won't have to choose between security or privacy. You'll get broad responsibility for developing and driving Fellowmind Sweden's work in information security, privacy, data protection, risk management, and regulatory compliance. Fellowmind is a consulting firm and leading Microsoft partner, but this is not a consulting role. It's an in-house role close to operations where you'll have the opportunity to make a real impact, build structures that stand the test of time, and become a key person in an organization that grows and evolves. For those of you working today in information security, GDPR, or compliance who want to broaden your responsibilities, this could be your next natural career step. About the role This is a new role created to consolidate and develop Fellowmind Sweden's work in Governance, Risk & Compliance. You'll be a central player in the space between operations, IT, HR, Legal, and management, while collaborating with our international colleagues in security and privacy. You'll report to our COO Jacob and work closely with Linn, our Head of Legal & Compliance. You'll have significant autonomy and a broad toolkit. The role combines areas that are often separate at many employers—information security and GDPR/privacy. We believe you have your main focus in either information security or GDPR/privacy today, but also a good understanding of the other area and a desire to continue developing in both. Since the role is new, we're looking for someone who thrives on taking own initiatives, creating structure, and independently driving projects from idea to implementation. Among other things, you will: Drive and further develop our ISO 27001-certified information security management system. Coordinate and develop our work in GDPR and data protection. Coordinate risk assessments, audits, and compliance activities. Manage governing documentation such as policies, guidelines, and procedures. Support operations on security and compliance matters related to customer dialogues, procurements, audits, and other business-critical processes. Work with supplier reviews, incident management, and follow-up. Monitor and analyze developments in the privacy and information security field. Contribute to our work in AI governance and new regulatory requirements such as NIS2 and the AI Act. This is an operational specialist role with significant mandate to drive initiatives forward and create structure in areas that are important to the entire organization. Who are you? We believe you work today as, for example, a GRC Specialist, Information Security Officer, GDPR/Privacy Specialist, Compliance Officer, or in a broad role in risk, security, and regulatory compliance, and have done so for at least a couple of years. You could come from a consulting or audit firm focused on GRC issues, or from a larger organization in, for example, banking, insurance, tech, or the public sector where you've worked closely with operations on information security and data protection. To succeed in this role, we see that you have: Experience working in both information security and GDPR/privacy, or alternatively deep expertise in one area combined with some experience and an interest in the other. Good understanding of GDPR and practical data protection work. Experience with ISO 27001 and working with or managing an ISMS. Experience facilitating risk assessments, audits, or similar processes. Very good ability to communicate in Swedish and English. Ability to work independently and drive your work forward without detailed direction. We also believe you are someone who values breadth over narrow specialization. You like creating order in complex matters, collaborating with many different stakeholders, and translating requirements into solutions that work in practice. At the same time, you have a business perspective and thrive in an organization where information security, data protection, and compliance are not ends in themselves, but important enablers for operations and our customers. Why Fellowmind? What many of us appreciate most about Fellowmind is the culture. We believe in freedom with responsibility, collaborative work without ego, and that people develop best when trusted to make an impact. Our values permeate everyday life. We are Always Personal, Act with Courage when we see opportunities to do things better, and strongly believe we are Better Together. At the same time, we are Serious About Fun. We believe work should be developmental, meaningful, and fun. The practical details Start: As soon as possible, but we naturally understand any notice period. Extent: Full-time. Location: At our central office in Malmö. Deadline: 18/9, but apply today, as we work with continuous selection. Recruitment process: Initial interview, in-depth interviews, tests/case, and reference checks. About Fellowmind Fellowmind is a European market leader in digital transformation. We combine deep industry knowledge and personal guidance with Microsoft's cloud services for the entire business platform, from ERP, cloud infrastructure, data analytics and AI, to CRM, intranet, and Modern Workplace. Fellowmind is an international company with over 2,000 employees and has offices in the Netherlands, Denmark, Finland, Poland, and Sweden. Learn more at www.fellowmind.se