ISO & Security Specialist at PreZero Recycling AB

Bravura Sverige AB · plný úvazek

Hornsbruksgatan 28, Stockholm, Švédsko

Are you passionate about information security and want to work in a role where you can make a real difference? We are now seeking an Information Security Specialist (ISO) who wants to take on both operational and strategic responsibility for developing, implementing, and managing the organization's information and cybersecurity efforts in Sweden. This role is central to operations and involves close collaboration with business units, IT, and international stakeholders. About the Position This is a full-time consulting assignment lasting 12 months. You will be employed by Bravura and work as a consultant at PreZero Recycling AB. This is explicitly intended to be a long-term position at PreZero, with the ambition to recruit you into the company. This gives both you and PreZero a good opportunity to get to know each other and evaluate how well your collaboration works. About the Company PreZero Recycling AB is a sustainable partner in recycling and waste management, regardless of the type of residual materials or operations. Together with their customers, they contribute to the circular economy and a more sustainable future. PreZero offers efficient waste and recycling solutions with a focus on customer needs and long-term sustainability. They collect and manage residual materials from customers' operations through recycling and/or energy recovery. In their daily work, customer value equals environmental value. In Sweden, PreZero operates at approximately 60 locations, has just over 1,100 employees, more than 50 recycling and reception facilities, and manages waste for about 40 Swedish municipalities. Their operations create value not only for customers who use their recycling services, but also for manufacturing industry and the energy sector by converting waste into valuable raw materials for new production. PreZero views diversity as one of their greatest strengths and strives to create a workplace where all employees feel included and encouraged to contribute. We welcome all applicants regardless of background or circumstances. Responsibilities As an Information Security Specialist, you are responsible for maintaining and further developing the organization's information security framework in Sweden. You serve as the business's primary contact person for information security and drive the work together with business managers, system owners, process owners, and the IT department. An important part of the assignment is translating policies, requirements, and frameworks into practically feasible processes. You ensure that information security requirements are met, follow up on measures, and support the business in creating a long-term sustainable security culture. The role also involves coordinating information security matters within the group, participating in international forums, and helping to create structure around application mapping, risk management, and governing documents. Among other things, the role includes: Maintain and develop the organization's information security framework Drive implementation of processes based on ISO 27001 principles Serve as the main contact for national regulations and requirements in information and cybersecurity, such as NIS2 Ensure compliance with policies, guidelines, and security requirements Coordinate work between business units, IT, and international stakeholders, including mapping systems, processes, and applications from an information security perspective Follow up on risks and drive measures and improvement initiatives Education, Experience, and Personal Qualities To succeed in this role, we would like to see that you have: Experience working in information security Experience working with governance, processes, or frameworks related to information security Good understanding of ISO 27001 or similar information security standards Ability to translate regulatory requirements, policies, and security frameworks into practical working methods Academic education in information security, IT, risk management, or similar field, or equivalent professional experience Good communication skills in Swedish and English, both spoken and written It is also valuable if you have: Experience implementing or managing ISO 27001-based frameworks Experience working with NIS2 or other regulatory requirements in information/cybersecurity Experience with security audits, audits, penetration testing, or similar Experience from larger organizations or international groups Experience in change management or project management We are looking for someone who is self-driven and comfortable taking responsibility for their area. You have the ability to create structure, prioritize the right issues, and drive work forward. At the same time, you are communicative and find it easy to collaborate with people at different levels in the organization. To succeed in this role, you need to be able to explain complex security issues in an educational way and create understanding for why certain measures are important. You are confident in challenging existing working methods when needed and are motivated by creating long-term improvements in operations. Additional Information Start: Immediately/by agreement Location: Stockholm, Solna Salary: By agreement We use a competence-based methodology in all recruitment processes to ensure unbiased selection. We also conduct continuous selection, which means we take down the ad when sufficient candidates have applied. If you become a candidate for the position, we will contact you for an initial phone interview. Regardless of whether you proceed in the process or not, you will receive feedback on your application. Have questions? Feel free to reach out! 📧 [email protected] 📞 010-171 47 10 We recommend that you submit your application immediately as we conduct continuous selection. Welcome with your application! #Brillante