Vacant job

Hotell- och Restauranganställdas a-kassa (HRAK) manages the security and benefits for 87,000 members within the hotel, restaurant, and visitor industries. With an important societal mandate, HRAK contributes to economic security for people across the country every day.

The organization is in an exciting phase of development where digitalization, information management, and security are becoming increasingly important areas. To meet growing demands from the external environment, authorities, and members, HRAK is now expanding its work within information security and is therefore seeking an Information Security Coordinator who wants to take overall responsibility for developing and driving systematic information security work forward.

You will become part of the IT and development department and work closely with operations, management, IT consultants, and external suppliers. The role is newly established, which means a unique opportunity to help build, shape, and develop working methods in this area. Here you will have a central role with significant influence and the opportunity to make a real difference in an organization where information security is a strategically important issue.

HRAK offers a business with short decision-making paths, engaged colleagues, and a clear societal mandate where your work contributes to both business development and increased security for members. The office is centrally located on Kungsholmen and features a unique and modern design.

About the Role

As Information Security Coordinator, you are responsible for coordinating, developing, and monitoring HRAK's systematic information security work. You will be the engine behind the organization's Information Security Management System (ISMS) and work both strategically and operationally to ensure that the organization's information is handled securely and in accordance with regulations.

An important part of the assignment will be to establish and further develop the organization's Information Security Management System together with the management. You will act as a natural point of contact between operations, IT, external suppliers, and authorities.

Examples of tasks:

• Build, maintain, and further develop the Information Security Management System (ISMS)
• Develop policies, guidelines, and frameworks within the information security area
• Conduct risk and vulnerability analyses as well as impact assessments
• Handle and monitor information security incidents
• Ensure compliance with regulations, internal policies, and security requirements
• Train and increase security awareness among employees and managers
• Provide advisory support to operations, management, and the IT function
• Participate in business projects with information security as a specific focus area
• Set security requirements for and monitor external IT suppliers
• Represent HRAK in external forums and contacts with, among others, the Security Council of Swedish Unemployment Funds, IMY, the Swedish Civil Contingencies Agency, and external collaboration partners
• Report the information security status to management and decision-makers

Who are you?

We are looking for someone who combines strong security thinking with a pragmatic and business-oriented approach. You thrive in a role where you get to take initiative, drive issues forward, and create structure. At the same time, you have the ability to communicate complex security issues in a pedagogical way and create understanding among different target groups.

You are self-reliant, analytical, and confident in working both strategically and operationally. Since the role involves many contact surfaces, we also see that you are communicative, collaborative, and have a good ability to build trust within the organization.

Our Requirements:

• Post-secondary education in areas such as systems science, computer science, information security, cyber security, or similar
• Approximately 3 years of work experience in information security or related fields
• Knowledge of GDPR and information management
• Experience with risk analyses, policy documents, and security-related processes
• Good technical understanding and experience from IT environments or IT operations
• Experience in driving, coordinating, or monitoring security-related initiatives and projects
• Very good knowledge of Swedish and English, both spoken and written

Meritorious:

• Experience in building or maintaining an Information Security Management System (ISMS)
• Knowledge of ISO 27001, NIS2, and other relevant frameworks
• Certifications such as CISM, CISSP, or CISA
• Experience working in the public sector or other regulated activities

What HRAK Offers

At HRAK, you have the opportunity to combine an important societal mandate with a qualified specialist area where you have significant mandate to influence.

You are offered:

• A key role with great responsibility and high visibility in the organization
• Opportunity to build and develop information security work from the ground up
• A business with short decision-making paths and engaged colleagues
• Competence development in an area that is becoming increasingly important
• A stable organization with a clear societal mandate
• Good opportunities to influence working methods, processes, and future development
• Thorough introduction and good benefits

Other Information

Employment type: Permanent position, with an initial probationary period

Start: According to agreement

Scope: Full-time, Monday to Friday

Location: Stockholm

This recruitment process is handled by A-hub, and emails regarding the position go through A-hub. Apply by clicking "Apply" below. Please note that we place great importance on your motivation and interest in the position.

About HRAK

Hotell- och Restauranganställdas a-kassa (HRAK) offers economic security to members within the hotel, restaurant, and visitor industries. With a clear societal mandate, high service level, and focus on development, HRAK works to create security and support throughout working life.