Business Information Security Officer – EMEA & APAC

Job Description

Be part of something bigger. Decode the future.

At Electrolux Group, our vision is to be the home appliance industry leader in consumer satisfaction by delivering outstanding lifetime experiences with solutions that always get better. We share ideas and collaborate so that together, we can develop solutions that deliver more enjoyable and sustainable living.

Come join us as you are. We believe diverse perspectives make us stronger and more innovative. In our global community of people from 100+ countries, we listen to each other, actively contribute, and grow together.

Join us in our exciting quest to build the future home.

At Electrolux Group, our vision is to be the home appliance industry leader in consumer satisfaction by delivering outstanding lifetime experiences with solutions that always get better.

We share ideas and collaborate so that together, we can develop solutions that deliver more enjoyable and sustainable living.

Come join us as you are. We believe diverse perspectives make us stronger and more innovative. In our global community of people from 100+ countries, we listen to each other, actively contribute, and grow together.

Join us in our exciting quest to build the future home.

All about the role:

The Business Information Security Officer (BISO) – EMEA & APAC ensures cybersecurity is a strategic enabler for business growth, transformation and innovation across the region.

The BISO acts as the strategic bridge between Group Cyber Security and regional business priorities, translating Group cybersecurity strategy, policies and standards into actionable plans across EMEA & APAC.

Working across business, Product and Technology domains, the role helps ensure cybersecurity risks are understood, appropriately managed and that security is embedded by design into business processes, products, platforms and technology initiatives.

The BISO partners closely with business and technology leaders, Legal, Data Privacy, Compliance and Group Cyber Security to drive effective implementation of cybersecurity controls, regulatory requirements and risk-reduction initiatives.

The role reports to the Group CISO and works closely with the Regional CIO EMEA & APAC and regional business and technology leadership.

What you'll do:

Business alignment & cybersecurity execution

• Translate Group Cyber Security strategy into actionable regional priorities and plans across EMEA & APAC.
• Act as a trusted cybersecurity advisor to business and technology leadership.
• Partner with business and technology leaders to identify, assess, manage and communicate cybersecurity risks.
• Drive adoption of security-by-design principles across products, platforms, technology and business transformation initiatives.
• Support business ownership and accountability for cybersecurity risks and implementation of appropriate controls.
• Support the secure onboarding of new technologies, suppliers and initiatives.
• Build strong collaboration between regional stakeholders and Group Cyber Security.

Cyber risk & vulnerability management

• Coordinate regional cybersecurity risk assessments and risk-reduction activities.
• Monitor the regional cybersecurity risk posture and escalate material risks and unresolved issues.
• Support security control adoption, risk exceptions and compensating controls.
• Coordinate with IT, Product and Engineering teams to drive timely vulnerability remediation and corrective actions.
• Communicate cybersecurity risks and mitigation priorities clearly to both technical and business stakeholders.

Cybersecurity incident management & resilience

• Support regional cybersecurity incident preparedness and readiness.
• Coordinate the business response to cybersecurity incidents in collaboration with Group Cyber Security and accountable business and technology teams.
• Support assessment of business impact and facilitate recovery priorities to minimize disruption.
• Coordinate regional post-incident activities and follow-up on agreed corrective actions.
• Help strengthen cyber resilience and business preparedness across the region.

Governance, risk & compliance

• Support implementation and consistent adoption of Group Cyber Security policies, standards and controls.
• Coordinate regional cybersecurity regulatory and compliance requirements in collaboration with Legal, Data Privacy and Compliance.
• Support audit readiness, security assessments, evidence collection and security control tracking.
• Monitor compliance and highlight material gaps, exceptions and remediation needs.
• Support internal control and IT general control activities where applicable.
• Provide regional cybersecurity risk and compliance insights to Group Cyber Security and relevant business and technology leadership.

Security culture

• Promote strong cybersecurity awareness and accountability across EMEA & APAC.
• Support the Group Security Awareness Program and regional security initiatives.
• Help business and technology teams understand how individual decisions contribute to the organization's overall cybersecurity posture.
• Foster a culture where cybersecurity risks are understood, appropriately owned and considered as part of everyday business decisions.

Who you are:

• You are a strategic and business-oriented cybersecurity leader who knows how to connect cybersecurity with business priorities.
• You build strong and trusted relationships across business and technology organizations and are comfortable engaging with senior stakeholders. You can translate complex cybersecurity risks into clear business implications and practical actions.
• You combine strategic thinking with a strong focus on execution and follow-through. You are comfortable operating across organizational boundaries and influencing outcomes without relying solely on formal authority.
• You remain composed and decisive when dealing with cybersecurity risks, incidents and other situations requiring clear prioritization and coordination.
• Most importantly, you see cybersecurity not simply as a control function, but as an enabler of resilient and sustainable business.

Qualifications and experience:

• Bachelor's or Master's degree in Cyber Security, Computer Science, Information Technology or a related discipline, or equivalent relevant experience.
• Extensive experience in enterprise cybersecurity, information security, cyber risk management or related areas within large and complex organizations.
• Proven experience managing cybersecurity risks in multinational and regulated business environments.
• Strong understanding of cybersecurity strategy, governance, risk management and compliance frameworks.
• Good understanding of security architecture and security-by-design principles.
• Experience working with vulnerability management, incident response and cyber resilience.
• Good knowledge of cybersecurity regulations, compliance requirements and industry standards.
• Experience supporting cybersecurity audits, assessments, security controls and risk-remediation activities.
• Ability to assess, prioritize and communicate cybersecurity risks to both technical and non-technical stakeholders.
• Proven ability to influence decisions and drive outcomes across business, technology and security teams.
• Strong communication and stakeholder-management skills, including engagement with senior leadership.
• Relevant industry certifications such as CISSP, CISM, CRISC, CCSP or equivalent are considered an advantage.

Key competencies:

• Cybersecurity Strategy & Business Alignment
• Cyber Risk Management
• Governance, Risk & Compliance
• Security-by-Design
• Cyber Resilience & Incident Coordination
• Vulnerability & Risk-Reduction Management
• Executive Stakeholder Management
• Business Partnership & Influencing
• Regulatory Compliance & Security Standards
• Change & Transformation Leadership
• Security Culture & Awareness

Where you'll be:

This is a position based at our Global Headquarters in Stockholm (Sweden).

We are proud of our culture of inclusivity and diversity. At our Global Headquarters we have 60+ nationalities working together for our common goals.

We work in a hybrid setup that gives everyone up to 20% flexibility to work remotely, while boosting creativity and collaboration through regular office presence.

We look forward to receiving your application!

As part of Electrolux Group, we will continuously invest in you and your development. There are no barriers to where your career could take you.

About Us

Electrolux Group is a leading global appliance company that has shaped living for the better for more than 100 years.

We reinvent taste, care and wellbeing experiences for millions of people, always striving to be at the forefront of sustainability in society through our solutions and operations.

Under our group of leading appliance brands, including Electrolux, AEG and Frigidaire, we sell household products in around 120 markets every year. In 2023 Electrolux Group had sales of SEK 134 billion and employed 45,000 people around the world.

For more information go to www.electroluxgroup.com.