Specialist in Information Security
Workplace: Stockholm, Sweden
Expires: August 14, 2025
We are looking for a dedicated specialist with a strong interest in IT and information security to work on challenging assignments across various industries. You will contribute your expertise and be a key person for both us and our clients.
Main requirements:
  • 3–5 years of experience in IT and information security, either in a line role or as a consultant
  • Experience in operational, systematic, and risk-based security work
  • Good understanding of security governance, risk management, and regulatory compliance
  • Experienced in providing security advice and conducting audits within organizations
  • Confident in participating in projects implementing information security management systems including certification processes
  • Technical understanding and ability to balance security with business needs
  • Academic degree or equivalent in IT and information security
  • Fluent in Swedish and English, both spoken and written
Responsibilities:
  • Provide expert advice and conduct security audits within client organizations
  • Participate in projects to implement information security management systems and certification processes
  • Balance technical security measures with the operational needs of the business
  • Contribute as a key expert to both Castra and its clients across various industries
Required hard skills:
  • IT and information security expertise
  • Operational and risk-based security management
  • Security governance and risk management understanding
  • Regulatory compliance knowledge
  • Experience in security audits and advisory
  • Project participation for ISMS implementation and certification
  • Technical proficiency in IT security
Recommended hard skills:
  • Certifications such as CC, CISM, CISSP, CISA, or CRISC
  • Knowledge of regulations PCI DSS, GDPR, OSL, NIS
  • Familiarity with standards ISO 27001, NIST, CIS Controls
Soft skills:
  • Engaged and proactive attitude
  • Ability to balance security needs with business requirements
  • Team player with good communication skills
  • Ability to work independently and take initiative
  • Good problem-solving skills
Frameworks:
  • ISO 27001
  • NIST
  • CIS Controls
Natural languages:
  • Swedish (Proficient)
  • English (Proficient)
Cultural skills:
  • Employee ownership and participation
  • Respect for individual choices and development
  • Supportive and collaborative work environment
  • Entrepreneurial mindset