Head of Information Security – Stockholm

Are you an experienced information security professional ready to take a leading role in strengthening cybersecurity governance and risk management? We are looking for a senior specialist who can combine strategic security leadership with hands-on execution in a complex organisation.

We are looking for a Head of Information Security for a consulting assignment in Stockholm.

In this role, you will lead and coordinate information security activities across a large organisation, ensuring that cybersecurity risks are identified, assessed and managed through a structured, risk-based approach.

You will work closely with senior management, IT, business functions and external suppliers to translate security requirements and regulatory obligations into practical measures and clear priorities.

The position offers the opportunity to influence security governance, strengthen organisational resilience and contribute to the continuous improvement of information security processes.

• Lead and develop the organisation's information security framework, policies and working methods.

• Identify, assess and manage information security and cybersecurity risks.

• Maintain and improve the Information Security Management System (ISMS), including relevant policies and governing documents.

• Conduct and facilitate security risk assessments and recommend appropriate mitigation measures.

• Monitor security incidents, deviations, identified risks and improvement initiatives.

• Define and review information security requirements for IT systems, digital services and projects.

• Provide security guidance to architects, IT teams, project managers and business stakeholders.

• Establish security requirements for procurement processes, contracts and supplier relationships.

• Assess supplier security risks and follow up on remediation activities.

• Coordinate information security initiatives across IT, Compliance, Procurement and business functions.

• Present security risks, priorities and recommendations to senior management.

We are looking for someone who has:

• Extensive experience in information security and cybersecurity within a large, decentralised and/or international organisation.

• Strong experience in security governance, information security frameworks and risk assessments.

• Practical experience developing and maintaining an Information Security Management System (ISMS).

• The ability to translate technical security risks and regulatory requirements into clear business priorities and actionable measures.

• Experience defining security requirements for IT solutions, digital services and organisational changes.

• Experience assessing supplier security risks and supporting security requirements in procurement and contracts.

• Strong stakeholder management skills and experience collaborating across IT, business functions and senior management.

• Good understanding of cybersecurity regulations, including NIS2 and GDPR-related security requirements.

• Excellent communication skills and the ability to engage both technical specialists and senior decision-makers.

• Fluency in Swedish and English, both written and spoken.

You are a confident and analytical information security professional with a structured, pragmatic and solution-oriented approach.

You can balance strategic security objectives with practical implementation and are comfortable working independently while coordinating multiple stakeholders.

You communicate complex security matters clearly, build trust across different organisational functions and know how to turn risk assessments into meaningful actions.

You are proactive, responsible and motivated by improving security maturity in a complex business environment.

This is an opportunity to take a central role in shaping information security governance and supporting important security decisions within an established organisation.

You will work with a broad range of security challenges, collaborate closely with senior stakeholders and contribute to strengthening the organisation's overall cybersecurity resilience.

A background check is mandatory before the assignment begins.

Does this opportunity match your experience and professional ambitions?

We welcome your application and look forward to learning more about your background.

Applications are reviewed on an ongoing basis.

Location: Stockholm, Sweden Period: 16 November 2026 – 30 April 2027 Scope: Full-time, 40 hours per week Working model: On-site, 5 days per wee

Sway Sourcing är en innovativ rekryteringspartner som specialiserar sig på att matcha rätt talang med rätt företag – snabbt och effektivt. Vårt huvudfokus ligger inom Ekonomi, Administration, HR, Marknad och IT, men vi har även den breda expertis och flexibilitet som krävs för att leverera skräddarsydda rekryteringslösningar inom alla branscher.

Trots att vi är en relativt ny aktör har vi redan byggt förtroende hos många av Sveriges största företag och arbetar både nationellt och internationellt. Med baser i Sverige och Spanien erbjuder vi en unik kombination av lokal expertis och global räckvidd. Vårt starka nätverk och djupa branschinsikter gör oss till en självklar partner för företag som vill ligga steget före i sin rekrytering.