Fröjd Agency oferă soluții digitale pentru companii, cu accent pe experiențe sustenabile care implică publicul. Activitatea sa acoperă domeniile B2B, comerț electronic și media. Profilul furnizat nu precizează posturi disponibile în prezent sau detalii despre recrutare.
Senior Security and Compliance Lead
Lead Fröjd’s information security program, advance ISO 27001 certification, and guide security work across client projects. The role combines internal security responsibilities with hands-on client engagement.
Descriere
- Run Fröjd’s information security program day to day
- Maintain risk registers and policies, support management reviews, and coordinate internal and external audits
- Complete ISO 27001 certification and maintain it
- Advise on security in client projects, including architecture choices and data flows
- Answer client security questionnaires and procurement security appendices, and join follow-up discussions
- Triage vulnerabilities in client solutions with technical leads
- Turn laws and regulations into practical requirements for projects and initiatives
- Coordinate shared security and compliance processes with sister and parent companies
- Manage security incidents and report back to clients
- Spend about half of the role on internal security work and the rest on client projects
Cerințe
- Previous experience leading or building an information security program
- Able to work independently with external auditors
- Able to write concise policies in Swedish and/or English
- Comfort with data processing agreements, subprocessor chains, and vendor reviews
- Broad technical knowledge of OWASP, dependency and CVE triage, and cloud security across AWS, GCP, or Azure
- Able to represent the company independently in discussions with client security teams
- Interested in keeping current with laws and regulations such as GDPR, NIS2, DORA, and CRA
Beneficii
- Flexible working hours
- Option to work from home
- Professional development through conferences and internal knowledge-sharing forums
- A mentor during onboarding
- Structured introduction to work practices, clients, and systems
- Open culture with a varied mix of clients, industries, and projects
- Opportunity to learn from sister and parent companies within Eidra