We are looking for an experienced Chief Information Security Officer & Privacy Manager to our Nordic Tech organization within Aller. As CISO & Privacy Manager, you will be responsible for overseeing the assurance activities related to the availability, integrity, and confidentiality of customer, business partner, employee, and business information. In this critical position you will ensure the protection of sensitive information and compliance with Aller Group’s information security policies and privacy regulations.
As the process owner for information security and privacy management, you will work across business units in the Aller Group, collaborating with key stakeholders to facilitate risk assessments and manage risk across the organization. You will also lead the Cyber Security team, manage IT- and security audits, and align security and privacy initiatives with overall business goals.

Key Responsibilities
Information Security Management:

• Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program.
• Facilitate risk assessment and risk management processes across Aller Group business units.
• Maintain and enhance the information security management framework.
• Ensure consistent application of security policies and standards across technology projects, systems, and services.

Privacy Management:

• Ensure privacy compliance efforts within Aller Nordic Tech, adhering to data protection regulations and internal policies.
• Implement privacy policies, procedures, and guidelines.
• Provide advice and support to business units on matters related to information security, including application security, vendor screening, and data processing agreements.
• Collaborate with legal and compliance teams on privacy-related issues.

Risk Management:

• Collaborate with executive management to determine acceptable levels of cyber security risk.
Provide leadership in risk assessment, risk mitigation, and raise awareness of risk management concerns company-wide.

Requirements

• Master’s degree in information technology, business administration, or related field.
• 8-12 years of experience in risk management, information security, and relevant IT / security roles.
• Professional security management certification (e.g., CISSP, CISM, or similar).
• Familiarity with information security management frameworks such as ISO/IEC 27001, CIS, NIST.
• Competency in GDPR and privacy regulations.
• Excellent written and verbal communication skills; fluent in Danish/Swedish/Norwegian and English.
• Relevant experience in contract and vendor negotiations.

To succeed in this role, we believe you possess strong decision-making capabilities, coupled with the ability to effectively lead, inspire, and drive initiatives across the organization. You have a technical background, along with exceptional communication skills, and a high level of integrity. Strong collaboration skills are essential, as maintaining continuous dialogue with stakeholders at all levels of the organization, as well as with external partners, is vital to ensuring alignment and engagement.

About Aller Nordic Tech
We are a Nordic Tech & IT organization delivering Digital Product development and IT services to 2,500 colleagues within Media, Travel and Marketing Agencies throughout Norway, Denmark, Sweden, and Finland. We are working on developing the newest digital solutions to support all our business areas.

Apply!
The position is full time, and you will be working from our office in either Stockholm, Copenhagen or Oslo.
This recruitment is managed by our Swedish colleagues so please apply by following the link bellow. We continuously invite candidates for interview so please apply as soon as possible and no later than 22nd of September 2024. If you have any questions regarding the job or the process, contact Frida Hamark at frida.hamark@aller.com. We are looking forward to reading your application!