IT Security and Compliance Framework Specialist

Type of employment: Contract

Start Date: ideally November 2026

End Date: estimated June 30th 2027 - possibility to be prolonged

Number of positions: 1

Work location: Göteborg / Gothenburg, Västra Götaland County, Sweden

Ways of working: hybrid (3 days / week on-site)

Workload Allocation: 100%

Language: English fluent communication (verbal and written)

We are looking for an IT Security and Compliance Framework Specialist to maintain and improve our client’s ISMS and IT compliance framework, monitor KPIs, coordinate audits and risk assessments, manage CAPAs, review policies, and ensure alignment with standards and regulations such as ISO 27001, GDPR, NIS2, and FDA 21 CFR Part 11.

🟥 Role overview:

• Ensuring efficient operation of Information Security Management System (ISMS) within the defined scope.
• Maintaining IT compliance framework documentation.
• Ensuring adherence to the established IT security and compliance framework, identifying gaps/issues and opportunities for improvement and proposing actions.
• Coordinating and communicating IT Security and Compliance related services and activities with internal and external stakeholders.

🔴 Key Accountabilities

• Establishing needed inputs and developing KPI dashboards for monitoring IT processes performance.
• Monitoring IT process performance by measuring and analyzing KPIs. Defining actions based on analysis.
• Providing input to the IT security and compliance roadmap based on identified improvement opportunities.
• Perform periodic review of the IT systems and processes for adherence to the established IT framework.
• Providing input to ISMS and QMS management reviews.
• Preparing, planning, coordinating and documenting ISMS management reviews and risks assessment meetings.
• Documenting and monitoring the progress of IT security and compliance related NC:s and CAPA:s.
• Perform impact assessments for the IT security and compliance framework documentation to address expanded/changed legislative or geographical environment.
• Perform periodic review of the IT security and compliance framework documentation for applicability and validity to regulations (e.g. FDA 21CFR part 11, GDPR, NIS2) standards and internal requirements.
• Developing/revising IT related policies and procedures according to the IT security and compliance roadmap.
• Plan, coordinate, communicate and response to internal and external ISMS audits as per the audit plan.
• Provide input to IT Security and Compliance trainings.

🔶Key Decisions

Sole:

• Day-to-day operational decisions related to the monitoring, documentation, and assessment of IT compliance and security processes.
• Making decisions that ensure the project's adherence to IT security and compliance standards and regulations.
• Provides input and recommendations to the strategic security and compliance roadmap.

Shared:

• Decisions impacting broader organizational processes or requiring significant changes, are made in collaboration with other departments and stakeholders.

▶️Requirements:

• More than 3 years of relevant work experience with management system ISMS / QMS / EHS
• Expertise in maintaining Information security management system as per ISO/IEC 27001
• Certified security professional within one or more areas such as CISM, and CISA – highly desirable
• Practical knowledge of Data Privacy (e.g. GDPR) regulations
• Good understanding of medical device regulations (e.g. FDA 21 CFR Part 11, ISO 62304, ISO 81001-5-1) is desired
• Awareness from agile development and DevSecOps methods including understanding of end-to-end Software Delivery Lifecycle processes
• Preferred experience from work within Pharma or Medtech industry
• BSc. Degree in Engineering/Computer Science/Information Technology or equivalate experience

As part of the recruitment process, the client will conduct background checks on candidates who progress to later stages.

If this consultancy opportunity aligns with your experience, please click ‘apply now’ and submit your updated CV, clearly highlighting your expertise in the must-have competencies required for the role. The ideal candidate needs to have proven hands-on of ISMS/QMS experience, strong ISO 27001 expertise, and preferably a CISM or CISA certification with MedTech or pharmaceutical industry experience.

We look forward to receiving your application and speaking with you as soon as possible.