{"data":{"id":202901,"slug":"informationssakerhetskonsult-operativ-implementering-och-grc","type":"job","title":"Information Security Consultant \u2013 Operational Implementation and GRC","description":"Do you want to take your consulting to the next level at Sweden's best employer? We know what you're thinking. You've heard it before. But trust us, you haven't. Our cherry on top of the consultant cake is something else. Apply for the job and taste it yourself!\n\nAt Castra, we're looking for an information security consultant for a position on an exciting assignment with a major organization in Stockholm. The client is facing comprehensive improvement work in information security, cybersecurity, and regulatory compliance, with focus now on moving from identified gaps to actual implementation.\n\nYou'll become an important part of an existing project team and work closely with a senior lead in information security\/NIS2.\n\nAbout the assignment\nThe client has conducted a GAP analysis in areas including information security, cybersecurity\/NIS2, governance, risk management, continuity, incident handling, and vendor management. The next step is to translate identified improvement areas into functioning processes, controls, responsibility distribution, and working methods.\n\nAs an operational information security consultant, you'll be a close collaboration partner to the project's senior lead. You'll contribute execution capacity across several parallel work streams and work together with operations, IT, risk, legal\/compliance, procurement, and other key functions.\n\nThis is a role for someone who wants to work closely with the business and practically handle implementation, anchoring, and follow-up.\n\nExample of work tasks\nBreak down information security requirements and identified gaps into concrete activities and action plans.\n\nCoordinate and follow up activities across several parallel projects and work streams.\n\nParticipate in workshops and anchoring work with operations, IT, risk, compliance, and process owners.\n\nContribute to risk analyses, information classification, requirements traceability, and remediation work.\n\nDevelop and further enhance routines, processes, templates, control points, and documentation.\n\nSupport implementation of working methods in areas such as continuity management, incident handling, and vendor management.\n\nEnsure that new working methods are anchored and can be handed over to the line organization.\n\nTranslate overarching governance and recommendations into practical implementation.\n\nWe're looking for you who\nHave a couple of years of experience with operational information security in larger or complex organizations and are used to working closely with a CISO, Chief Information Security Officer, security function, or equivalent. You understand how requirements and governance need to be translated into functioning activities across different parts of an organization.\n\nWe'd like to see that you have experience with:\n\nImplementation of information security requirements, controls, processes, and working methods.\n\nRisk management, information classification, requirements management, and GAP\/remediation work.\n\nDriving or supporting multiple parallel projects, work streams, or business areas.\n\nRegulatory compliance related to, for example, NIS2, the Cyber Security Act, ISO 27001, MSB method support (NCSC Method Support from 2026), GDPR, DORA, or similar frameworks and regulations.\n\nCollaboration with both technical and business-oriented stakeholders.\n\nIt's a merit if you have worked with continuity management, incident handling, or vendor management. Experience from critical infrastructure, regulated, or other complex operations is also highly valuable.\n\nWho are you?\nWe place great importance on your personal qualities. You are communicative, confident, and unpretentious, with a natural ability to build trust with people in different roles and perspectives.\n\nPractical information\nStart: Fall 2026\nScope: Approximately 70% preliminarily. Exact scope will be determined in dialogue.\nLocation: Stockholm, with high on-site presence at the client.\nLanguage: Very good Swedish in speech and writing, as well as good English.\n\nThe assignment is subject to confidentiality, which means that further information about the client and assignment will be shared at a later stage of the process.\n\nOnly the best for the best \u2013 our personnel philosophy\nCastra is a consulting group in IT and Management. Or well, an elite squad you might say. We bring together the sharpest and most experienced consultants, simply because with us they get maximum value in both capacity and quality of life. We operate in Systems Development, IT Infrastructure, IT Governance & Leadership, and IT Security.\n\nWe've been named Sweden's and Europe's best workplace, for real! It sounds a bit boastful, but it's actually not us who said it. Since 2017, Castra has been certified by Great Place to Work, an award based entirely on employee surveys. Over the last three years, we've been named Sweden's Best Workplace for large companies, and most recently we also took first place among Europe's Best Workplaces. And as the icing on the cake, we're also a Gasell company and Career company!\n\nAt Castra, we believe in freedom, development, and community. As a consultant, you choose which assignments you take, when you work, if you want to level up any skills, and how much salary and vacation you take. Getting to build your own logo is just a bonus! Did you think that was all? Well, you were wrong. Support from great managers, activities, competent and quick-footed sales team, opportunity for co-ownership, great opportunities to influence the company's future, and wonderful colleagues \u2013 the list of what makes Castra a fantastic workplace can be made loooong. The possibilities are practically endless. A win for all parties, we say.\n\nCastra has offices in Gothenburg, Stockholm, Malm\u00f6, Link\u00f6ping, Norrk\u00f6ping, \u00d6rebro, J\u00f6nk\u00f6ping, and Sundsvall.\n\nRead more about what it's like to work with us at castra.se\/konsulterbjudande\/\n\nHave we managed to spark your curiosity?\nApply directly via the link or reach out to Charlotta.Ljung@Castra.se","language":"sv","is_translated":true,"title_original":"Informationss\u00e4kerhetskonsult \u2013 operativ implementering och GRC","description_original":"Vill du ta ditt konsultande till n\u00e4sta niv\u00e5 hos\u00a0Sveriges b\u00e4sta arbetsgivare? Vi vet vad du t\u00e4nker. Du har h\u00f6rt det f\u00f6rut. Men tro oss, det har du inte. V\u00e5rt k\u00f6rsb\u00e4r p\u00e5 konsultt\u00e5rtan \u00e4r n\u00e5got annat. S\u00f6k jobbet och smaka sj\u00e4lv!\nVi p\u00e5 Castra s\u00f6ker en informationss\u00e4kerhetskonsult f\u00f6r anst\u00e4llning till ett sp\u00e4nnande uppdrag hos en st\u00f6rre organisation i Stockholm. Kunden st\u00e5r inf\u00f6r ett omfattande f\u00f6rb\u00e4ttringsarbete inom informationss\u00e4kerhet, cybers\u00e4kerhet och regelefterlevnad d\u00e4r fokus nu ligger p\u00e5 att g\u00e5 fr\u00e5n identifierade gap till faktisk implementering.\nDu blir en viktig del av ett befintligt projektteam och arbetar n\u00e4ra en senior lead inom informationss\u00e4kerhet\/NIS2.\nOm uppdraget\nKunden har genomf\u00f6rt en GAP-analys inom bland annat informationss\u00e4kerhet, cybers\u00e4kerhet\/NIS2, styrning, riskhantering, kontinuitet, incidenthantering och leverant\u00f6rsstyrning. N\u00e4sta steg \u00e4r att oms\u00e4tta identifierade f\u00f6rb\u00e4ttringsomr\u00e5den till fungerande processer, kontroller, ansvarsf\u00f6rdelning och arbetss\u00e4tt.\nSom operativ informationss\u00e4kerhetskonsult blir du en n\u00e4ra samarbetspartner till projektets seniora lead. Du bidrar med genomf\u00f6randekraft i flera parallella arbetsstr\u00f6mmar och arbetar tillsammans med verksamhet, IT, risk, juridik\/compliance, ink\u00f6p och andra nyckelfunktioner.\nDet h\u00e4r \u00e4r en roll f\u00f6r dig som vill vara n\u00e4ra verksamheten och arbeta praktiskt med inf\u00f6rande, f\u00f6rankring och uppf\u00f6ljning.\nExempel p\u00e5 arbetsuppgifter\nBryta ner informationss\u00e4kerhetskrav och identifierade gap till konkreta aktiviteter och \u00e5tg\u00e4rdsplaner.\n\n\nSamordna och f\u00f6lja upp aktiviteter i flera parallella projekt och arbetsstr\u00f6mmar.\n\n\nDelta i workshops och f\u00f6rankringsarbete med verksamhet, IT, risk, compliance och process\u00e4gare.\n\n\nBidra till riskanalyser, informationsklassning, kravsp\u00e5rbarhet och \u00e5tg\u00e4rdsarbete.\n\n\nTa fram och vidareutveckla rutiner, processer, mallar, kontrollpunkter och dokumentation.\n\n\nSt\u00f6tta implementering av arbetss\u00e4tt inom exempelvis kontinuitet, incidenthantering och leverant\u00f6rsstyrning.\n\n\nS\u00e4kerst\u00e4lla att nya arbetss\u00e4tt f\u00f6rankras och kan \u00f6verl\u00e4mnas till linjeorganisationen.\n\n\nOms\u00e4tta \u00f6vergripande styrning och rekommendationer till praktiskt genomf\u00f6rande.\n\nVi s\u00f6ker dig som\nHar ett par \u00e5rs erfarenhet av operativ informationss\u00e4kerhet i st\u00f6rre eller komplexa organisationer och \u00e4r van att arbeta n\u00e4ra en CISO, informationss\u00e4kerhetschef, s\u00e4kerhetsfunktion eller motsvarande. Du f\u00f6rst\u00e5r hur krav och styrning beh\u00f6ver oms\u00e4ttas till fungerande aktiviteter i olika delar av en verksamhet.\nVi ser g\u00e4rna att du har erfarenhet av:\n\nImplementering av informationss\u00e4kerhetskrav, kontroller, processer och arbetss\u00e4tt.\n\n\nRiskhantering, informationsklassning, kravhantering och GAP-\/\u00e5tg\u00e4rdsarbete.\n\n\nAtt driva eller st\u00f6tta flera parallella projekt, arbetsstr\u00f6mmar eller verksamhetsomr\u00e5den.\n\n\nRegelefterlevnad kopplat till exempelvis NIS2, cybers\u00e4kerhetslagen, ISO 27001, MSB metodst\u00f6d ( NCSC Metodst\u00f6d sedan 2026), GDPR, DORA eller liknande ramverk och regelverk.\n\n\nAtt samarbeta med b\u00e5de tekniska och verksamhetsn\u00e4ra intressenter.\n\n\nDet \u00e4r meriterande om du har arbetat med kontinuitetshantering, incidenthantering eller leverant\u00f6rsstyrning. Erfarenhet fr\u00e5n samh\u00e4llsviktig, reglerad eller annan komplex verksamhet \u00e4r ocks\u00e5 mycket v\u00e4rdefull.\nVem \u00e4r du?\nVi l\u00e4gger stor vikt vid dina personliga egenskaper. Du \u00e4r kommunikativ, trygg och prestigel\u00f6s, med en naturlig f\u00f6rm\u00e5ga att skapa f\u00f6rtroende hos m\u00e4nniskor med olika roller och perspektiv.\nPraktisk information\nStart: H\u00f6sten 2026\nOmfattning: Prelimin\u00e4rt omkring 70 %. Exakt omfattning fastst\u00e4lls i dialog.\nPlats: Stockholm, med h\u00f6g fysisk n\u00e4rvaro hos kund.\nSpr\u00e5k: Mycket god svenska i tal och skrift samt god engelska.\nUppdraget omfattas av sekretess, vilket inneb\u00e4r att ytterligare information om kund och uppdrag delas i ett senare skede av processen.\nBara det\u00a0b\u00e4sta \u00e5t de b\u00e4sta \u2013 v\u00e5r personalfilosofi\nCastra \u00e4r en konsultgrupp inom IT och Management. Eller ja, en elite squad kan man s\u00e4ga. Vi samlar de vassaste och mest erfarna konsulterna, helt enkelt f\u00f6r att det \u00e4r hos oss de f\u00e5r ut max i b\u00e5de kapacitet och livskvalitet. Vi \u00e4r verksamma inom Systemutveckling, IT-infrastruktur, IT-styrning & Ledarskap samt IT-s\u00e4kerhet.\nVi \u00e4r utsedda till Sveriges- och Europas b\u00e4sta arbetsplats, p\u00e5 riktigt! Det l\u00e5ter lite skrytsamt, men det \u00e4r faktiskt inte vi som sagt det. Castra har sedan 2017 blivit certifierad av Great Place to Work, en utm\u00e4rkelse som \u00e4r helt baserat p\u00e5 medarbetarunders\u00f6kningar. Vi har de senaste tre \u00e5ren blivit utn\u00e4mnda till Sveriges B\u00e4sta Arbetsplats f\u00f6r stora bolag och nu senast kammade vi \u00e4ven hem f\u00f6rstaplatsen bland Europas B\u00e4sta Arbetsplatser. Som gr\u00e4dde p\u00e5 moset \u00e4r vi \u00e4ven ett Gasell- och Karri\u00e4rf\u00f6retag!\nP\u00e5 Castra tror vi p\u00e5 frihet, utveckling och gemenskap. Du som konsult styr sj\u00e4lv vilka uppdrag du tar, n\u00e4r du jobbar, om du vill levla upp n\u00e5gon kompetens och hur och mycket l\u00f6n och semester du tar ut. Att du f\u00e5r bygga din egen logga \u00e4r bara en bonus! Trodde du det var allt? D\u00e5 trodde du fel. St\u00f6d av bra chefer, aktiviteter, kompetent och snabbfotad s\u00e4ljstyrka, m\u00f6jlighet till del\u00e4garskap, stora m\u00f6jligheter att p\u00e5verka bolagets framtid och h\u00e4rliga kollegor \u2013 listan p\u00e5 vad som g\u00f6r Castra till en fantastisk arbetsplats kan g\u00f6ras l\u00e5\u00e5\u00e5ng. M\u00f6jligheterna bra n\u00e4ra o\u00e4ndliga. Win f\u00f6r alla parter, s\u00e4ger vi.\nCastra har kontor i G\u00f6teborg, Stockholm, Malm\u00f6, Link\u00f6ping, Norrk\u00f6ping, \u00d6rebro, J\u00f6nk\u00f6ping och Sundsvall.\nL\u00e4s mer om hur det \u00e4r att jobba hos oss p\u00e5 castra.se\/konsulterbjudande\/\nHar vi lyckats v\u00e4cka din nyfikenhet?\nS\u00f6k direkt via l\u00e4nken eller h\u00f6r av dig till Charlotta.Ljung@Castra.se","price":null,"currency":"SEK","status":"active","noindex":true,"location":{"address":"Landsv\u00e4gen 50A","full_address":null,"city":"Sundbyberg","country":"SE","latitude":59.36003259538,"longitude":17.972613461664},"metadata":{"region":"Stockholms l\u00e4n","duration":"Tills vidare","employer":"Castra Group AB","postcode":"17263","positions":1,"profession":"Informationsarkitekt","salary_type":"R\u00f6rlig ackords- eller provisionsl\u00f6n","employer_url":"https:\/\/karriar.castra.se","scope_of_work":"0\u2013100 %","working_hours":"Deltid","employment_type":"full_time","occupation_field":"Data\/IT","employer_workplace":"Castra","experience_required":true,"employment_type_label":"Vanlig anst\u00e4llning"},"user_id":null,"is_sponsored":false,"views_count":2,"ai_views_count":5,"bot_views_count":4,"ai_vendor_counts":{"openai":3,"anthropic":2},"visibility":"public","submission_source":null,"submission_ai_name":null,"has_owner_email":true,"can_contact_owner":true,"phone":null,"owner_email":"charlotta.ljung@castra.se","images":[],"published_at":"2026-09-09T11:14:12+00:00","expires_at":"2027-03-08T23:59:59+00:00","created_at":"2026-09-10T04:03:42+00:00","updated_at":"2026-09-16T03:07:44+00:00"}}