Information Risk and Compliance Officer
We at WeQuel are now looking for an Information Risk and Compliance Officer in Södertälje, where you will become an important part of the Production & Logistics organisation with a focus on information security governance, risk management and compliance. In the role you act as Information Security Officer, combining strategic and operational security governance with risk management, compliance and structured documentation activities. You contribute to strengthening security processes, supporting risk assessments and ensuring that procedures, guidelines and documentation are clear, accurate and aligned with security requirements and the client's Information Security Management System (ISMS).
As a consultant with us, you get the opportunity to work with one of our clients – leading companies within manufacturing, production and logistics – where you contribute to strengthening security processes, implementing structured ways of working and creating sustainable, compliant solutions.
Your responsibilities:
Governance and continuous improvement of the ISMS within Production & Logistics
Support and execution of IRAM assessments and related follow-up activities
Contribution to information security governance, processes and coordination activities
Preparation and maintenance of security-related documentation, reports and presentations
Review, rewriting and improvement of shopfloor IT procedures and guidelines
Collaboration with stakeholders across Production Units (PRUs), P&L IT (IN), Maintenance and Logistics
Leading and coordinating the network of Local Information Security Officers (LISOs)
Support to stakeholders in understanding and addressing information security and compliance requirements
Assessment of the implications of the Cyber Resilience Act (CRA) for Production & Logistics
Ensuring structured, consistent documentation and governance activities aligned with the ISMS
You work in close collaboration with the Cybersecurity Manager and a broad range of stakeholders, in an environment where you independently drive your activities forward while coordinating across multiple technical and operational interfaces within the organisation.
Requirements:
Experience within information security, cybersecurity support, risk management or compliance-related activities
Experience of information security governance, risk and compliance work
Experience of supporting or implementing structured security processes and ways of working
Experience of conducting or supporting risk assessments and follow-up activities
Experience of supporting governance processes, documentation activities or coordination of security-related work
Relevant academic degree or equivalent professional experience within information security, cybersecurity, risk management, compliance or a related field
Fluent Swedish and English, both spoken and written
Strong ability to produce professional documentation and deliverables in English
Strong documentation and analytical skills, with the ability to structure complex information clearly
Ability to develop, review and improve security-related procedures, guidelines and documentation
Ability to translate complex security and compliance requirements into clear, practical documentation
Ability to coordinate activities across multiple stakeholders, functions and organisational areas
Strong stakeholder management and communication skills, towards both technical and operational stakeholders
Structured, proactive and solution-oriented, with a high focus on quality and accuracy
Comfortable taking ownership and working across multiple parallel activities
Meriting:
ISO 27000 certification and/or practical experience of ISO 27001 frameworks
Knowledge of the Cyber Resilience Act (CRA) and NIS2
Experience of Cybersecurity Management Systems (CSMS)
Experience from industrial, production or manufacturing environments
Experience of IT/OT environments
Who you are:
You are a structured and detail-oriented information security professional with strong analytical skills and a high focus on quality. You take a proactive and solution-oriented approach and are comfortable taking ownership of your activities while collaborating closely with stakeholders across different functions and areas of expertise. You communicate clearly with both technical and operational stakeholders and can translate complex information, security requirements and governance needs into structured and understandable documentation.
Assignment details
Location: Södertälje, Sweden
Start – End date: 2026-09-14 – 2027-03-31 (September 2026 – March 2027)
Workload: 100% (full-time)
Remote: 100% ONSITE
Interview format: Remote / Teams interview
Language: Fluent Swedish and English, both spoken and written
We offer:
At WeQuel you become part of a consultant team that values people first – we believe success is created through commitment, collaboration and development. We offer a flat organisation with short decision paths, a strong sense of community and the opportunity to influence your own development.
