Vacant job

Have you outgrown your current role and are you looking for a context where your expertise has a direct line to the absolute core of the business?

At X-Team, you become part of a tight-knit core team where you work directly as a partner with our Head of X-Team and CISO. For the right person, this means a unique position: you avoid heavy hierarchies and administrative detours, stepping directly into an environment with short decision paths and maximum influence. Here we combine a strong team and security culture with the opportunity to drive strategically critical assignments with direct access to our customers' management teams and boards.

The Role and Your Placement

As an X-Team member, you become a key player in our delivery and management of compliance assignments. You have your fixed point in a senior expert team that shares your passion for information security.

We are looking for you who value craftsmanship and want to focus on delivery quality. The role is pragmatic and hands-on; you balance strategic advisory with actually producing and implementing the policies, risk analyses, and management systems that build robust resilience for real.

Main Responsibilities:

• ISO 27001 Implementation: Lead and drive the introduction and further development of Information Security Management Systems (ISMS).
• Risk Management: Establish structured and systematic risk work and conduct qualified risk assessments.
• Regulatory Compliance: Translate complex frameworks (e.g., NIS2, DORA, GDPR) into practical, operationally applicable controls and governing documents.
• Audit & Review: Plan and conduct internal audits and drive continuous improvement measures.
• Incident & Continuity Planning: Support customers' incident organizations and participate in strategic security exercises.
• Qualified Advisory: Act as a strategic sounding board for the customer's management and board, with the ability to balance business benefits against security requirements.

Who Are You?

To thrive in this role, you are analytical, structured, and curious in your professional role. You have a high communicative ability that allows you to navigate seamlessly between in-depth technical/regulatory details and the business needs of the boardroom. You appreciate independent ownership of your deliveries, but also value having a competent team and visible leadership behind you.

We Expect:

• Education: Academic degree in cybersecurity, law, risk management, or equivalent knowledge acquired in other ways.
• Experience: 3–7 years of practical experience in GRC or structured information security work.
• Standards: In-depth, practical experience with ISO 27001 and associated certification processes.
• Regulations: Good understanding and experience working with GDPR, NIS2, DORA, or similar legal requirements.
• Documented Delivery Capability: A pronounced "hands-on" mentality with a strong ability to independently produce and quality-assure written materials.
• Communication & Language: Very good analytical skills and an unfailing ability to communicate and document in a business manner in both Swedish and English.
• Integrity: High personal integrity and reliability, as the role involves security clearance checks.

Qualifications that are Meritorious:

• Relevant certifications such as ISO 27001 Implementer/Auditor, CISM, CISA, or CIPP/E.
• Experience with quantitative risk methods (e.g., FAIR).
• Previous experience in the role of DSO (Data Security Officer) or DPO.
• Familiarity with upcoming/new regulations and frameworks such as the EU AI Act, CRA, NIST CSF, or CIS Controls.

Why X-Team?

We offer a culture where professionalism meets lack of pretension. Through the direct proximity to customer management, you get an accelerated development curve, genuine collegial support, and the opportunity to shape the future of cybersecurity for our customers without losing the human perspective.

• Permanent employment
• Collective agreement
• Maximized wellness allowance

Security Check: A security check will be conducted.

Start: Immediately, subject to notice period and completion of security check.

Location: Stockholm or Gothenburg with the possibility of some remote work.

Application: We recruit continuously. So send in your application today!

Sweden's 7th best workplace 2026! Humanit works together with Great Place To Work so that we shall become Sweden's best workplace.

And by the way:

As an active part of a society with cultural and social diversity, Humanit’s ambition is to be characterized by inclusion and broad representation, as well as being a workplace with equal opportunities for all. Humanit hires, retains, promotes, and otherwise treats all employees and candidates based on experience, qualifications, and competence, regardless of gender, religion, origin, age, sexual orientation, gender identity, or functional variations.