Security Specialist

Assignment: Senior Information Security Specialist

This is a hands-on, business-oriented role that leverages both your technical insight and communication skills to deliver clear and effective security solutions.

You will collaborate cross-functionally with colleagues from Security, Legal, Procurement, and IT to ensure that security requirements are embedded in business processes and adhered to throughout the organization.

As part of the GRC (Governance, Risk & Compliance) team, you will report to the Chief Information Security Officer and play a key role in driving scalable, pragmatic security initiatives.

Key Responsibilities

• Lead the implementation and continuous improvement of the company’s information classification program
• - Develop practical guidelines and routines for data handling aligned with business needs and regulatory frameworks
• - Ensure adoption and consistent application of classification principles across all departments

• Support the application of security frameworks such as ISO 27001 and NIST
• - Participate in risk assessments, development of control measures, and follow-up on remediation plans
• - Help ensure business operations comply with internal policies and industry standards

• Act as a liaison between technical and non-technical teams, translating security requirements into actionable guidance
• - Contribute to supplier evaluations and security assessments in procurement processes
• - Collaborate on third-party risk management and RFP/RFI activities

• Work closely with IT, engineering, legal, procurement, and operations teams
• - Communicate security requirements in an understandable and business-relevant way
• - Drive awareness and training initiatives related to data security and compliance

• University degree and at least 8 years of experience in information security, compliance, or related areas
• - Proven track record of leading security initiatives with a business-driven approach
• - Strong knowledge of GRC frameworks and principles
• - Ability to apply security controls and practices in various business contexts
• - Experience with supplier assessments and procurement-related security work
• - Excellent communication skills with both technical and non-technical stakeholders
• - Certifications such as CISSP, CISM, or CISA are a plus

• Start date: June 1, 2025
• - End date: May 31, 2026
• - Workload: 100%
• - Location: Gothenburg, Sweden

This assignment is ideal for someone with a comprehensive understanding of information security who enjoys combining structure, communication, and business insight to drive effective security practices.

About Rasulson Consulting

With deep technical expertise and a strong network, we rapidly connect the right talent with the right assignments. With us, you’ll receive personal guidance, regular feedback, and the chance to take the next step in your IT career.