Information Risk & Compliance Officer

At Avaron, you get the security of permanent employment combined with the variety of working at different customers. We place specialists across everything from tech, IT and industry to project management and business support – and whatever the assignment, you have a consultant manager who is there for you and your development.

You will act as a key information security partner in a complex production and logistics environment where governance, risk management, compliance, and documentation all need to work together in practice. The role sits close to both operational and technical stakeholders, which means you will help turn security requirements into clear processes, usable guidelines, and structured ways of working.

You will work across production units, IT, maintenance, and logistics, supporting the continued development of the Information Security Management System (ISMS) and strengthening how security activities are coordinated and followed up. The role combines strategic perspective with hands-on execution, and it is especially interesting if you enjoy creating clarity in environments where security must support day-to-day operations.

• You will support and drive the continuous improvement and implementation of the ISMS within Production & Logistics.
• You will perform and support IRAM assessments, follow up on findings, and help stakeholders understand risk and required actions.
• You will contribute to information security governance, coordination, and structured ways of working across the organization.
• You will prepare and maintain security-related documentation, reports, presentations, and supporting material.
• You will review, rewrite, and improve shopfloor IT procedures and guidelines so they are clear, accurate, and aligned with security requirements.
• You will collaborate closely with stakeholders across production, IT, maintenance, and logistics.
• You will lead and coordinate the network of Local Information Security Officers.
• You will support the organization in understanding compliance needs, including the implications of the Cyber Resilience Act.

• Relevant academic degree or equivalent professional experience within information security, cybersecurity, risk management, compliance, or a related field.
• Experience working with information security governance, risk, and compliance activities.
• Experience supporting governance processes, documentation activities, or coordination of security-related work.
• Experience conducting or supporting risk assessments and associated follow-up activities.
• Strong ability to develop, review, and improve security-related procedures, guidelines, and documentation.
• Strong documentation and analytical skills with the ability to structure complex information clearly.
• Ability to work effectively with both technical and operational stakeholders and coordinate activities across multiple functions.
• Ability to independently structure, prioritize, and drive activities forward.
• Fluent Swedish and English, both spoken and written.
• Strong ability to produce professional documentation and deliverables in English.

• ISO 27000 certification and/or practical experience working with ISO 27001 frameworks.
• Knowledge of the Cyber Resilience Act (CRA) and NIS2.
• Experience working with Cybersecurity Management Systems (CSMS).
• Experience from industrial, production, or manufacturing environments.
• Experience working with IT/OT environments.

• Permanent employment at Avaron AB
• Occupational pension
• Wellness allowance of SEK 5,000 per year

Selections are made on an ongoing basis – apply as soon as you can.