In this senior and advisory role, you will work closely with stakeholders across Group IT, Security and the business to drive governance, compliance, and security culture. You will combine strategic advisory responsibilities with hands-on operational work, actively supporting implementation, follow-up, and day-to-day security activities across the organization. Reporting to the Group CISO, you will play a key role in implementing Lindab’s Information Security Framework, translating requirements into concrete processes, controls, and ways of working, leading regulatory initiatives such as NIS2, and ensuring audit readiness across a complex, international organization. 

This role is well suited for someone who enjoys structure, communication, and change management and who wants to make a visible impact on how information security is embedded across an international industrial group.  

Main Responsibilities 

• Oversee and coordinate information security and compliance initiatives, ensuring alignment with Group objectives and timely delivery. 

• Support the development, implementation, and rollout of Lindab’s Information Security Framework, based on leading standards and guidelines as (NIST, ISO/IEC 27001, ISO/IEC 27002, ISO 31000, CRA, AI Act and CIS Controls). 

• Lead and coordinate information security risk program 

• Lead and coordinate NIS2 compliance activities and other regulatory requirements as GDPR, AI Act, Resilience Act, ensuring strong governance, risk management, and reporting. 

• Maintain audit-ready documentation for GDPR, NIS2, and related regulations. 

• Continuously monitor compliance, identify gaps, and drive improvements to security processes and controls. 

• Develop and deliver tailored security awareness and training programs to support policy adoption and behavioral change. 

• Strengthen information classification, data protection, and risk management practices across the organization. 

• Support sites and business units in an international context on information security and compliance-related topics. 

• Manage communication channels to enable effective policy implementation, awareness, and incident reporting. 

• Act as a trusted advisor to stakeholders, supporting change management and practical adoption of security requirements.  
  

Previous Experience & Competencies 

• 5+ years of experience within information security, compliance, or governance in complex organizations. 

• Proven experience implementing information security frameworks, standards, and governance models. 

• Good knowledge of regulatory and compliance requirements such as NIS2, GDPR, AI Act, CRA, CIS Controls, ISO/IEC 27001/27002, ISO/IEC3100, AI Act or NIST. 

• Experience coordinating initiatives across multiple sites, functions, and stakeholders.