Assignment Description
The role combines strategic and operational management of information security with risk management, compliance, and structured documentation. You will work closely with the Cybersecurity Manager and stakeholders within production, IT, maintenance, and logistics to strengthen security processes and ensure alignment with the organization's Information Security Management System (ISMS).
Your main responsibilities:
ISMS Management: Support continuous improvement and implementation of the Information Security Management System (ISMS).
Risk Assessments: Conduct and follow up on risk assessments according to IRAM methodology.
IT/OT Guidelines: Review, develop, and improve procedures, guidelines, and security documentation for factory-level IT environments (Shopfloor IT/OT).
LISO Coordination: Coordinate the network of Local Information Security Officers (LISOs) and support stakeholders with compliance matters.
Regulations: Evaluate and assess the impact of the Cyber Resilience Act (CRA) on manufacturing and logistics.
Mandatory Requirements
Relevant academic degree or equivalent professional experience in information security, cybersecurity, risk management, or compliance.
Documented experience in Governance, Risk Management, and Compliance (GRC), including implementation and follow-up of risk assessments.
Very strong analytical ability and documentation skills with the ability to translate complex security requirements into clear, practical guidelines.
Good ability to coordinate and collaborate with both technical and operational stakeholders across organizational boundaries.
Fluent Swedish and English in both spoken and written form (particularly high level of professional English documentation).
Desirable Requirements
ISO 27000 certification and/or practical experience with the ISO 27001 framework.
Knowledge of the Cyber Resilience Act (CRA) and NIS2 Directive.
Experience with Cybersecurity Management Systems (CSMS).
Experience from the manufacturing or production industry and work in IT/OT environments.
About the Assignment & Practical Information
Assignment Period: 2026-09-14 - 2027-03-31
Remote Work: consultant must work 100% on-site
Location: Södertälje
Your Application
Does the role sound interesting and suitable? If so, please apply immediately as we conduct interviews on a rolling basis and the position may be filled before the final application deadline. We can only receive and process your application by registering your CV in our portal. With regard to GDPR, we cannot accept applications via email. We look forward to your application! The assignment is part of Quest Consulting personnel recruitment.
About Us
Quest Consulting is an authorized consulting firm with collective agreements, insurance, wellness benefits, and occupational pension. We specialize in IT, Engineering, HR, Administration, and Finance. Our goal is to be your personal collaboration partner, and that is why it is so important to us to work according to our core values, where our guiding principles are to be Personal, Innovative, and Professional.