Requirements
Must have:
Proven track record implementing ISO/IEC 27001 to certification — not just auditing or advising; ideally 2+ ISMS implementations taken through to a passed certification audit.
Demonstrated ability to build the mandatory core — risk-assessment methodology, risk register and Statement of Applicability, plus producing and operationalising ISMS documentation.
Strong cross-functional delivery experience — driving a programme with dependencies across IT, HR, Legal, Procurement and Facilities, ideally in a group/subsidiary structure (certifying a subsidiary under/alongside a group-certified ISMS).
Professional working proficiency in Swedish and English (Nordic stakeholder environment and Group documentation).
Hands-on experience preparing organisations for, and supporting, external Stage 1/2 audits.