Business Security & Data Privacy Officer
Orange Cyberdefense Sweden AB · Stockholm · Tills vidare
Orange Cyberdefense Sweden AB is recruiting a **Business Security & Data Privacy Officer** to join its Global Security Department. Working without direct management responsibilities, the officer advises the "Cyber with Business" unit and cooperates with the departmental team and the organizational DPO to define and maintain the internal security and privacy framework. Core responsibilities include acting as a contact point for data subject requests, monitoring compliance with personal data regulations, advising on DPIAs and PIAs, and promoting a privacy culture. The position also involves defining generic security assurance plans, supporting internal and external audits, handling client audit procedures, and assisting legal, sales, and pre-sales teams with client contractual security and privacy requirements. Applicants must hold a **bachelor's degree or equivalent experience** in information security, risk management, privacy, compliance, or a related field, alongside at least **5+ years of relevant experience**. Mandatory requirements include strong written and verbal communication skills, hands-on experience with GRC tools and compliance reporting, and in-depth knowledge of GDPR, DORA, NIS2, ISO 27001, and SOC 2. Relevant professional certifications—such as ISO 27001 Lead Auditor/Implementer, ISO 27035, ISO 27701, CISSP, CISM, CISA, or CRISC—are considered advantageous.
We are looking for a Business Security & Data Privacy Officer to join the Global Security Department within Orange Cyberdefense. This is a great opportunity to be part of an important internal function.
The right candidate combines a broad knowledge of data protection and business security with a service-oriented approach. You enjoy having contact with many parts of our business, sharing your knowledge and contributing to the development of our department.
In this role, you will not have hierarchical management responsibilities, but you will play a key role in the compliance of the offers offered to our clients and in the compliance of our suppliers with National and European regulations, ISO certifications and SOC2 assurance. In this role, you collaborate with various stakeholders, effectively communicating and driving initiatives forward.
Key Responsibilities:
- Under the authority of the Business Security Officer of the Business Unit "Cyber with Business", Advise and support the Business Unit – Cyber with Business when it comes to Data Privacy and Security related topics.
- In cooperation with other members of the Global Security Department and under the functional authority of the DPO OCD, define and maintain the internal Security and Privacy framework.
- Act as a point of contact for data subject requests.
- Analyse, investigate, audit, and monitor that processing activities comply with the legal framework or the proper application of procedures, methods, or instructions relating to the protection of personal data
- Provide advice, upon request, regarding Data Protection Impact Assessments (DPIAs) or Privacy Impact Assessments (PIAs) and verify their implementation.
- Participate in awareness, and promote a "Data Protection and Privacy" culture
- Define and maintain, with the Orange Cyberdefense operational teams, the Generic Security Assurance Plans and certification for our cybersecurity products and services
- Maintain the procedures for managing client audits on information security and personal data protection commitments.
- Support the execution of internal and external audits.
- Provide support to the legal, sales, and pre-sales teams in responding to our clients' contractual requirements regarding information security and personal data protection (contractual clauses, questionnaires, security assurance plans, for example)
The ideal candidate will have:
- Strong execution capability and the ability to move from framework to implementation.
- Experience in defining, formalizing and improving procedures.
- Strong communication and stakeholder management skills.
- A structured, pragmatic and solution-oriented approach
- A strong sense of ownership and follow-through
We are looking for a candidate who combines solid knowledge with a practical, delivery-focused mindset.
Required qualifications:
- Bachelor´s degree or equivalent experience acquired in other ways within Information Security, Risk Management, Privacy, Compliance or a related field
- At least 5+ years of relevant experience within the field.
- Strong knowledge of key frameworks and regulations including GDPR, DORA, NIS2, ISO 27001 and SOC 2.
- Experience with GRC tools, dashboards, compliance reporting and control monitoring.
- Experience driving implementation and adoption of processes and ways of working across cross-functional requirements.
- Strong written and verbal communication skills.
Preferred qualifications:
- ISO 27001 Lead Auditor/Implementer
- ISO 27035 Risk Manager/Lead Risk Manager
- ISO 27701 Lead Implementer/Auditor
- Relevant certifications i.e. CISSP, CISM, CISA, CRISC
- Strong business understanding and ability to apply Privacy and Security principles in a client-facing environment
- Experience of similar roles
- Ability to apply a risk-based and pragmatic approach to prioritization and implementation.
We Are Orange Cyberdefense
Orange Cyberdefense is Sweden's leading cybersecurity company. Our vision is simple yet powerful: We build a safer digital society.
We offer our customers services across a wide range of areas, from in-depth technical solutions to broader services such as security governance and management, risk modelling, and risk analysis. We have 400 colleagues in Sweden and 3,500 colleagues globally.
At Orange Cyberdefense, we are all different but share the same passion for cybersecurity – and that is our greatest strength. We are proud of our differences, experiences, and backgrounds, and we firmly believe that we need to include everyone in order to provide solutions that work for everyone. That is why we ensure that all applications are handled equally.
Other
We recruit continuously and will fill the position as soon as we find the right person.
Orange Cyberdefense – Together, we build a safer digital society.