Information Risk and Compliance Officer
We at WeQuel are now looking for an experienced Information Risk and Compliance Officer in Södertälje, where you become an important part of the Production & Logistics organisation with focus on information security governance, risk management and compliance. You act as Information Security Officer for the client's Production & Logistics area, combining strategic and operational security governance with risk management, compliance and structured documentation, and you work in close collaboration with the Cybersecurity Manager and a broad range of stakeholders across Production Units, P&L IT, Maintenance and Logistics.
As a consultant with us, you get the opportunity to work at one of our clients, leading companies within industry, manufacturing and logistics, where you contribute to strengthening security processes, supporting risk assessments and ensuring that procedures, guidelines and documentation are clear, accurate and aligned with security requirements and the client's Information Security Management System (ISMS).
Your responsibilities:
Governance and continuous improvement of the ISMS within Production & Logistics
Implementation of ISMS requirements and ways of working
IRAM assessments and related follow-up activities
Information security governance, processes and coordination
Preparation and maintenance of security-related documentation, reports and presentations
Review, rewriting and improvement of shopfloor IT procedures and guidelines
Collaboration with stakeholders across PRUs, P&L IT (IN), Maintenance and Logistics
Leadership and coordination of the network of Local Information Security Officers (LISOs)
Support to stakeholders in understanding and addressing information security and compliance requirements
Assessment of the implications of the Cyber Resilience Act (CRA) for Production & Logistics
Quality assurance of structured, consistent and ISMS-aligned governance documentation
You work in a dynamic environment where you independently drive your activities forward while coordinating across multiple technical and operational interfaces within the organisation.
Requirements:
Experience within information security, cybersecurity support, risk management or compliance
Experience of information security governance, risk and compliance activities
Experience of supporting or implementing structured security processes and ways of working
Experience of conducting or supporting risk assessments and follow-up activities
Experience of supporting governance processes, documentation activities and coordination of security-related work
Relevant academic degree or equivalent professional experience within information security, cybersecurity, risk management, compliance or related field
Fluent Swedish and English, both spoken and written
Strong ability to produce professional documentation and deliverables in English
Ability to develop, review and improve security-related procedures, guidelines and documentation
Ability to translate complex security and compliance requirements into clear, practical documentation
Strong documentation and analytical skills, with ability to structure complex information clearly
Strong stakeholder management and communication skills, towards both technical and operational stakeholders
Ability to coordinate activities across multiple stakeholders, functions and organisational areas
Structured, detail-oriented and quality-focused
Proactive and solution-oriented, with ownership of your own activities
Ability to independently structure, prioritise and drive assigned activities, including several parallel activities
Meriting:
ISO 27000 certification and/or practical experience of ISO 27001 frameworks
Knowledge of the Cyber Resilience Act (CRA) and NIS2
Experience of Cybersecurity Management Systems (CSMS)
Experience from industrial, production or manufacturing environments
Experience of IT/OT environments
Assignment details
Start date: 2026-09-14 (September 2026)
End date: 2027-03-31 (March 2027)
Location: Södertälje, Sweden
Workload: 100% (full-time)
100% ONSITE
Interview format: Remote / Teams interview
We offer:
At WeQuel you become part of a consultant team that values people first – we believe success is created through commitment, collaboration and development. We offer a flat organisation with short decision paths, a strong sense of community and the opportunity to influence your own development.
