FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in managing the ISO 27001 certification lifecycle and implementing security controls for privacy compliance, particularly in multi-tenant SaaS environments. Proficient in automating security workflows and translating complex security requirements into practical solutions.
Highest-signal resume keywords
ISO 27001 Certification ManagementGDPR Compliance KnowledgeRisk Management ExperienceWorkflow Automation SkillsB2B SaaS Experience
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information Security ComplianceIT AuditRisk AssessmentPolicy DevelopmentControl MonitoringData Flow MappingSecurity Risk TranslationEvidence Collection AutomationVendor Data Handling ReviewPenetration Testing Coordination
Soft Skills
Proactive ApproachSolutions-Oriented MindsetClear Communication
Tools & Technologies
GRC PlatformsAI ToolsWorkflow Automation ToolsScheduling Tools
Industry Keywords
B2B SaaSEU AI ActISMS PolicySecurity Awareness TrainingPublicly Listed Companies
About the role
Key responsibilities & impact- Own the ISO 27001 certification lifecycle and annual ISMS calendar
- Maintain information security Risk and Asset Registers
- Run internal and external audits from scoping through remediation
- Own the ISMS policy library and create practical policies, playbooks, and control documentation
- Drive policy adoption through clear communication and practical guidance
- Serve as the main contact for enterprise customer security reviews, RFP security sections, and the Trust Center
- Lead rollout of the RFP AI tool
- Review new tools and vendors, including AI tools, for data handling, access, and integration risks
- Track regulations across markets and translate requirements into security controls
- Support privacy compliance, vendor data handling reviews, ROPA inputs, and DPIAs
- Assess security risks associated with AI tools and maintain AI usage guidelines
- Coordinate penetration testing engagements and track remediation findings
- Own the security awareness training program, onboarding, and recurring training sessions
- Automate security workflows, evidence collection, control monitoring, training reminders, audit scheduling, and recurring tasks
- Work with Operations, Legal, Engineering, IT Ops, and commercial teams
- Report to the VP Operations
Requirements
What you’ll need- 5+ years in information security compliance, IT audit, or risk management
- Experience in B2B SaaS or another fast-growing tech company is ideal
- Track record of implementing or maintaining ISO/IEC 27001 certifications
- Strong working knowledge of GDPR and security controls supporting privacy compliance in multi-tenant SaaS environments
- Awareness of evolving AI regulation, including the EU AI Act
- Comfortable mapping systems, data flows, and integrations
- Ability to advise on security implications of architecture changes
- Hands-on experience automating evidence collection or control monitoring
- Experience evaluating GRC platforms against building solutions in-house
- Comfortable with workflow automation, scheduling tools, and AI-assisted drafting
- Ability to turn complex requirements into practical workflows
- Ability to translate technical security risk into business terms
- Proactive and solutions-oriented approach
- Experience working in or with publicly listed companies is a bonus
- Familiarity with internal control requirements of publicly listed companies is a bonus
- Already based in Stockholm is prioritized
- Eligible to work in Sweden without visa sponsorship
Benefits
Comp & perks- Opportunity to shape information security practices at Bambuser
- High level of ownership and visible contribution across the company
- Experienced team support and strong security foundations
- Collaborative, no-ego team environment
- Room to take ownership
- Opportunity to work on meaningful business problems
- Opportunity to build and automate security processes
- Team collaboration and professional growth through cross-functional work