Information Security Specialist

at  Benify

Benify is a globally recognized HR tech company dedicated to delivering top-notch benefits through its rewards platform. With an internationally diverse team of 500+ Benifyers across 6 countries, we are successfully collaborating with around 1500 customers and meeting the needs of close to two million users worldwide . Our mission is all about empowering individuals, supporting them to realize their full potential while promoting an engaging and sustainable work atmosphere where everyone is included and valued - “Because People Matter” .

INFORMATION SECURITY SPECIALIST

We are looking for an experienced Information Security Specialist to join our team and play a pivotal role in managing and enhancing our Information Security and Data Protection efforts. In this position, you will drive compliance initiatives, develop security policies, and support strategic projects, ensuring our systems and data remain secure, resilient, and compliant with industry standards such as ISO 27001 and SOC 2.
You will collaborate with various teams and lead initiatives fostering a security-conscious culture. Your expertise will be essential in providing advisory support for projects and delivering training to promote awareness across the organization.
If you’re ready to make a significant impact in safeguarding our data and systems, this is your opportunity! Join our innovative team and contribute to our commitment to excellence in information security.

Key Responsibilities:

• Manage Information Security & Data Protection activities in alignment with internal strategies and ISMS, ensuring compliance with standards such as ISO 27001 and SOC 2.
• Drive continuous improvements and development across the organization by identifying areas for enhancement, implementing necessary solutions, and strengthening compliance efforts.
• Develop, enforce, and continuously improve Information Security & Data Protection policies and procedures while providing advisory support in identifying security requirements and controls for projects.

• Conduct awareness training sessions to foster a security-conscious culture and serve as a resource for internal and external security inquiries.Monitor industry best practices and network at security forums and conferences to enhance our security programs.

PERSONAL ATTRIBUTES:

We’re looking for a collaborative Information Security Specialist to work cross-functionally with multiple teams in this central role. Strong technical and organizational security expertise is essential to navigate complex challenges effectively.
An analytic mindset, problem-solving skills, and the ability to quickly translate security needs into solutions are crucial. Solid project management skills and a structured approach will also be vital to succeed in this role.

We also see that you have:

• Hands-on experience with ISO 27001 and/or SOC 2 compliance.

• Minimum of 5 years of relevant experience in the field of information security.Fluency in English; Swedish language skills are a plus.

It’s an extra if you also have…

• Experience in strategic planning and budget management in an Information Security context.

Practical Information
Start: From January 2025.
Extent: Full-time, 100%.
Location: Gothenburg, Stockholm or Malmö. The team is all located in Gothenburg.
We encourage you to apply by submitting your CV and/or LinkedIn profile using the application form below. Constant application screening implies our search may end before the last application date, so hurry!
We are an equal-opportunity employer and are happy to accommodate any reasonable adjustments necessary to help you during the interview process

• Manage Information Security & Data Protection activities in alignment with internal strategies and ISMS, ensuring compliance with standards such as ISO 27001 and SOC 2.
• Drive continuous improvements and development across the organization by identifying areas for enhancement, implementing necessary solutions, and strengthening compliance efforts.
• Develop, enforce, and continuously improve Information Security & Data Protection policies and procedures while providing advisory support in identifying security requirements and controls for projects.
• Conduct awareness training sessions to foster a security-conscious culture and serve as a resource for internal and external security inquiries.Monitor industry best practices and network at security forums and conferences to enhance our security programs