Information Risk and Compliance Officer

At Avaron, you get the security of permanent employment combined with the variety of working at different customers. We place specialists across everything from tech, IT and industry to project management and business support – and whatever the assignment, you have a consultant manager who is there for you and your development.

You will take a key role in strengthening information security within a large-scale manufacturing and logistics environment where operational needs, IT, and governance must work together. The role combines strategic and hands-on work: you will support the continuous development of the Information Security Management System, contribute to risk and compliance activities, and help ensure that security procedures and documentation are clear, practical, and aligned with established requirements.

You will work closely with a Cybersecurity Manager and collaborate with stakeholders across production, IT, maintenance, and logistics. This is a strong opportunity for you who enjoy combining governance, risk, and documentation with real impact in an industrial environment.

• You will support and improve the Information Security Management System (ISMS) within production and logistics.
• You will perform and support IRAM assessments and follow-up activities.
• You will contribute to information security governance, processes, and coordination across the organization.
• You will prepare and maintain security-related documentation, reports, presentations, and supporting material.
• You will review, rewrite, and improve shopfloor IT procedures and guidelines to ensure clarity, accuracy, and compliance with security requirements.
• You will collaborate with stakeholders across production units, IT, maintenance, and logistics.
• You will lead and coordinate the network of Local Information Security Officers (LISOs).
• You will support stakeholders in understanding and addressing information security and compliance requirements.
• You will help assess the impact of the Cyber Resilience Act (CRA) on production and logistics.
• You will help ensure that documentation and governance activities are structured, consistent, and aligned with the ISMS.

• Relevant academic degree or equivalent professional experience within information security, cybersecurity, risk management, compliance, or a related field.
• Experience working with information security, cybersecurity support, risk management, or compliance-related activities.
• Experience with information security governance, risk, and compliance work.
• Experience supporting governance processes, documentation activities, or coordination of security-related work.
• Experience conducting or supporting risk assessments and related follow-up activities.
• Strong ability to develop, review, and improve security-related procedures, guidelines, and documentation.
• Strong documentation and analytical skills, with the ability to structure complex information clearly.
• Ability to work effectively with both technical and operational stakeholders.
• Ability to coordinate activities across multiple stakeholders, functions, and organizational areas.
• Ability to independently structure, prioritize, and drive work forward.
• Fluent Swedish and English, both spoken and written.
• Strong ability to produce professional documentation in English.

• ISO 27000 certification and/or practical experience working with ISO 27001 frameworks.
• Knowledge of the Cyber Resilience Act (CRA) and NIS2.
• Experience working with Cybersecurity Management Systems (CSMS).
• Experience from industrial, production, or manufacturing environments.
• Experience working with IT/OT environments.

• Permanent employment at Avaron AB
• Occupational pension
• Wellness allowance of SEK 5,000 per year

Selections are made on an ongoing basis – apply as soon as you can.