Information Security Officer

at  Polestar

THE OPPORTUNITY

We’re currently looking for an Information Security Officer, to join our Information Security Department. Polestar looks for people with a passion for electric mobility, an interest in technology, and a desire to create the change we know is needed.
Polestar is active in many countries and more to markets will come in a rapid pace. The IT landscape complexity is growing and in Information Security we need to keep the company safe from a diverse set of threats. The main threats are cyber security related and to protect against that a solid foundation of security practices is needed.
This position is located at our Gothenburg HQ. We believe in a hybrid model when it comes to remote and onsite work, knowing that both in-person collaboration and individual time to focus are needed. What matters most is that people get the time, and support, to do what needs to be done. And to enjoy doing it, of course.

Information Security Officers are responsible for the design and continuous improvement of the Information Security Capabilities at Polestar. They are experts in various security practices and are responsible for the end-to-end delivery of key InfoSec capabilities throughout the company, including incident management, classification and assessment, vulnerability management, security monitoring, and other related practices. They design, deploy, and steer the execution of security processes, delivering results to various departments and ensuring the integration and implementation of these services across the organization.
These officers support the aggregation and tracking of identified risks from their specialized information security perspective. They lead in the design and formulation of InfoSec capabilities, services, and their related key figures. They identify the relevant stakeholders within Polestar to ensure efficient collaboration with other digital, security, and compliance functions. They report to the CISO and are accountable for an integrated status and future development tracking of the Information Security Capabilities.

See below for a more thorough breakdown of the various tasks and areas you’ll be responsible for:

• Oversee and govern InfoSec Capabilities or Services per the InfoSec Strategy.
• Define and set standards and practices for responsible areas.
• Support Risk Management, Risk Analysis, and stakeholder consultations on Risk Treatment.
• Formulate tactical goals and translate them into operational plans.
• Contribute to strategic planning and governance decisions.
• Manage stakeholders and promote InfoSec Culture, which includes delivering tailored awareness and training programs.
• Coordinate capabilities, ecosystems, and market-specific deployments.
• Collect, aggregate, and monitor InfoSec Risk Data.