Information Security and Data Protection Consultant

ArkivIT AB · plný úvazek

Sturegatan 34, Stockholm, Švédsko

ArkivIT is one of Sweden's leading consulting firms within digital archive and information management – with specialized expertise in information security, data protection, e-archives, and records management. Since our founding in 2010, we have expanded our service offerings and built a team of dedicated and knowledgeable consultants working with organizations across the country. Our strength lies in the combination of deep specialized knowledge, humility, and results-focused delivery – and our goal is to contribute to secure, structured, and sustainable information management in both the public and private sectors. Now we're looking for you to combine information security and data protection in practice! At ArkivIT, you'll have the opportunity to work in an experienced and knowledge-driven team where your expertise is valued and developed. We're seeking someone who wants to combine information security and data protection in practice – and help our clients build long-term sustainable and efficient approaches to governance, compliance, and secure information management. You'll have the freedom to shape your day-to-day work while contributing to positive impact in some of Sweden's most important operations. About the role As an information security and data protection consultant, you'll work closely with our clients' operations and often be a key person in their development efforts. The role is both strategic and operational, encompassing assignments where you move between advisory work, analysis, and implementation. You'll work independently but always have the support of competent colleagues, and you'll be part of our Data Protection & Information Security team where we collaborate and share experience. Example tasks: Implement or further develop information security management systems (ISMS) Support data protection work related to GDPR, including structure, governance, and compliance Conduct risk and gap analyses in information security and data protection Serve as an advisor or in roles such as information security manager, data protection coordinator, or DPO Handle personal data incidents and support impact assessments (DPIA) Develop governing documents, action plans, and procedures Conducting training and workshops in organizations Support organizations in compliance with ISO 27000, GDPR, NIS2, and other applicable regulations Qualifications Requirements: At least 3 years of experience working in information security and/or data protection Experience from the public sector (the entire 3-year period does not need to be within the public sector) Experience with practical work in governance, compliance, or development within one or both areas Strong knowledge of relevant regulations such as GDPR and standards in information security (e.g., ISO 27000 series) Ability to work independently and build trust in different types of organizations Fluent Swedish in speech and writing, and good English Relevant higher education or university degree Merits: Experience working in roles such as CISO, data protection officer, or data protection coordinator Certifications in information security or data protection (e.g., ISO 27001 Lead Implementer/Auditor, CISM, CISA, or similar) Experience in related areas such as IT security, cybersecurity, or information management Knowledge of additional frameworks and regulations, such as NIS2 or DORA Previous experience as a consultant Project management experience and experience leading assignments Personal qualities We're looking for someone who is confident in your expertise and enjoys working in an advisory role where you make a real difference. You are analytical, solution-oriented, and have a structured way of working. You take responsibility for your work, drive your assignments forward, and deliver with quality. At the same time, you are humble in your approach, communicative, and pedagogical – and you value collaboration and contributing to your team's development. Our offer At ArkivIT, you'll have a flexible and developmental work environment where you can influence your day-to-day work. We offer: Continuous professional development An open and learning-oriented culture Experienced and engaged colleagues Social activities and team events Your manager Gustav works with a coaching leadership style and believes in freedom with responsibility, where you receive both support and space to develop. We care about our employees and create conditions for reflection, feedback, and long-term development. Application Don't delay your application – we interview on a rolling basis and the position may be filled as soon as we find the right candidate. For questions, you're welcome to contact Gustav Rönne at [email protected]. Start: By agreement Extent: Full-time Placement: Stockholm or by agreement