PCI & Audit Officer
6 months ago
Company Description
Job Description
The Cyber Security & Privacy Unit is the trusted adviser to leaders and key-stakeholders. We provide a broad knowledge of Cyber Security and Data Privacy, our security and privacy strategies, architecture, policies and processes, our business and security roadmaps. We lead, secure, report and support on prioritization of Cyber Security & Privacy related matters. The Unit is also responsible for the PCI-DSS (Payment Card Industry) framework and implementation within the H&M Group.
Our mission
Our mission is to ensure the protection of our company's critical data, infrastructure, and customers from potential cyber threats. We are committed to providing expert guidance and advice to all stakeholders within the organization on best practices for mitigating cyber risks, as well as maintaining compliance with relevant laws and regulations.
Responsibilities :
Develop, implement, and maintain the PCI-DSS compliance program. Coordinate and report regular audits and risk assessments to identify vulnerabilities and non-compliance issues. Ensure that our organization meets all regulatory requirements related to PCI-DSS. Work closely with our business partners to identify and mitigate risks related to the handling of payment card data. Provide guidance and support to business units to ensure that they are complying with PCI-DSS requirements. Develop and implement security policies and procedures to ensure that payment card data is secure. Drive and coordinate various audits within the Cyber Security space
Qualifications
Mandatory requirements , both competence and tools:
5+ years of experience in PCI-DSS compliance and audit in an enterprise environment. Strong understanding of PCI-DSS and related regulations. 5+ years of experience in External or Internal Audit. Ability to work with business partners to identify and mitigate risks. Excellent communication and interpersonal skills. Ability to work independently and as part of a team. CISSP, CISA or other related certifications are preferred but not mandatory.Qualifying requirements :
Experience of e-commerce technologies is a merit Experience of retail business is a merit Experience of other data privacy laws is a merit Experience of working in an agile organization You are open minded, trustworthy and a self-motivated team player You have an entrepreneurial spirit, have great personal ownership, work proactively and continuously improve activities in complex, quickly transforming environments English, oral and written fluently Swedish, oral and written is meriting
Additional Information
Working with tech at H&M Group
Shaping the future of fashion with people, data, and tech. The fashion and retail industries are going through a transformation, driven by customers' technology and sustainability expectations. At H&M Group, we want to shape the future of fashion and lifestyle by harnessing the power of smart tech and data. With our 74-year history of innovation, we understand the need to collaborate and co-create with engineers and tech specialists around the world to achieve our vision.
What we offer
You are joining a unique value-driven culture, a large tech network and community where you can be yourself. Besides the obvious perks such as staff discount card, flexible work life, learning communities, wellness benefits, parental benefits etc. There are endless opportunities to experiment and grow in any direction that you want, and when you grow, we grow. Being a major player gives us countless opportunities to make a real impact and shape the future.
This is a full-time position with placement in Stockholm
-
Cyber Security
4 weeks ago
Stockholm, Stockholm, Sweden H&M Group Full timeJob SummaryThe Cyber Security & Privacy Unit at H&M Group is seeking a highly skilled Cyber Security & Privacy Specialist to join our team. As a key member of our team, you will be responsible for ensuring the protection of our company's critical data, infrastructure, and customers from potential cyber threats.Key ResponsibilitiesDevelop, implement, and...
-
Cyber Security and Compliance Specialist
3 weeks ago
Stockholm, Stockholm, Sweden H&M Group Full timeCompany OverviewH&M Group is a leading fashion retailer with a strong commitment to cybersecurity and data privacy. Our Cyber Security & Privacy Unit is responsible for ensuring the protection of our company's critical data, infrastructure, and customers from potential cyber threats.Job SummaryWe are seeking a skilled Cyber Security and Compliance Specialist...
-
Stockholm, Stockholm, Sweden Spotify Full timeJob SummarySpotify is seeking a Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio. The successful candidate will work closely with our engineering teams and audit functions to drive SOC 2 compliance and other compliance and information security frameworks. Key responsibilities include leading the SOC 2 compliance...
-
Stockholm, Sweden Nordea Bank Full timeJob ID: 26903 We are looking for a new colleague who will join us as an Internal Audit Manager. This is an opportunity for you to become part of a great team focusing on auditing the Business Banking area as well as gaining experience in various internal audit initiatives in Nordea. This is an exciting time for you to join us, because as a team,...
-
Security GRC Manager
3 weeks ago
Stockholm, Stockholm, Sweden Spotify Full timeJob Description:Spotify is seeking a Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio. This role will work closely with our engineering teams and audit functions. The ideal candidate will have a deep understanding of SOC 2 compliance, information security practices, and experience working with technology teams.Key...
-
Head of Security Governance and Compliance
7 days ago
Stockholm, Stockholm, Sweden Spotify Full timeJob DescriptionThe Senior Security GRC Manager will be responsible for leading the SOC 2 compliance program, designing and implementing security controls, and collaborating with internal and external business partners. The role requires a deep understanding of SOC 2 compliance, information security practices, and experience working with technology...
-
Cyber Security Manager
3 weeks ago
Stockholm, Stockholm, Sweden H&M Group Full timeJob SummaryWe are seeking a highly skilled Cyber Security Manager to join our team at H&M Group. As a Cyber Security Manager, you will be responsible for leading a team of cyber security professionals, driving the PCI program, and ensuring compliance with relevant laws and regulations.ResponsibilitiesLead a team of cyber security professionals driving the...
-
Senior Security GRC Manager
1 month ago
Stockholm, Sweden Spotify Full timeSpotify is seeking a Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio who will work closely with our engineering teams and audit functions. You’ll be focused on handling the execution of tasks for the Security GRC Program within Spotify, primarily in relation to driving SOC 2 compliance, but also to other...
-
Compliance Officer GDPO
4 months ago
Stockholm, Sweden Ericsson Full timeDescription Join our Team About this opportunity Ericsson is looking for an accomplished and positive team member to strengthen its Group Data Protection Office. The critical role of the Office is to carry out the statutory tasks under Article 39 GDPR for the parent company and main operational company of the Ericsson Group, as well as...
-
Electrical Compliance Officer
4 weeks ago
Stockholm, Sweden Alstom Full timeReq ID:446169 At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, 80,000 colleagues lead the way to greener and smarter...
-
Electrical Compliance Officer
2 months ago
Stockholm, Sweden Alstom Full timeReq ID:446169 At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, 80,000 colleagues lead the way to greener and smarter mobility...
-
Chief Financial Officer
4 weeks ago
Stockholm, Stockholm, Sweden Greenely Full timeChief Financial OfficerGreenely is seeking a visionary Chief Financial Officer to join our management team and play a pivotal role in our journey towards a sustainable planet. As a key architect of our financial strategy, you will be responsible for ensuring our financial metrics are spot-on, from cash flow to revenue and expenses, and providing sharp...
-
Compliance Officer
6 months ago
Stockholm, Sweden Tink Full timeTink is a payment institution licensed by the Swedish FSA. How you’ll challenge an industry: Tink is Europe’s leading open banking platform, allowing customers to initiate payments from any account, at any bank to their own service in a fast and seamless way. It is vital for Tink to be able to take swift strategic decisions that are well-balanced and...
-
Compliance Officer, Nordics
4 months ago
Stockholm, Sweden AXA Group Full timeCompliance Officer, Nordics We are now looking to add a Compliance Officer to our growing legal and compliance function based in Stockholm, Sweden working with the Nordic region (Sweden, Denmark, Norway and Finland). In this role you will develop and drive our compliance function to the next levelfor the Nordic countries. You report to the Head of...
-
Area Manager
6 months ago
Stockholm, Sweden H&M Full timeJob DescriptionThe Cyber Security & Privacy Unit is the trusted adviser to leaders and key-stakeholders. We provide a broad knowledge of Cyber Security and Data Privacy, our security and privacy strategies, architecture, policies and processes, our business and security roadmaps. We lead, secure, report and support on prioritization of Cyber Security...
-
Area Manager
6 months ago
Stockholm, Sweden H&M Group Full timeCompany Description Job Description The Cyber Security & Privacy Unit is the trusted adviser to leaders and key-stakeholders. We provide a broad knowledge of Cyber Security and Data Privacy, our security and privacy strategies, architecture, policies and processes, our business and security roadmaps. We lead, secure, report and support on...
-
Compliance Officer
1 month ago
Stockholm, Stockholm, Sweden Tink Full timeAbout the RoleTink, a leading open banking platform, is seeking a seasoned Compliance Officer to join its expanding Compliance function. As a key member of the team, you will play a crucial role in developing and implementing the company's Anti-Money Laundering (AML) and Counter Terrorism Financing (CTF) compliance program.Key ResponsibilitiesManage and...
-
Global Information Security Manager
1 month ago
Stockholm, Stockholm, Sweden Intrum Full timeJob Title: Global Information Security Manager - IT Risk ManagementAt Intrum, we're seeking a highly skilled Global Information Security Manager to join our team. As a key member of our Global Information Security function, you will play a critical role in protecting our digital assets and managing IT risks.Key Responsibilities:Develop and maintain the IT...
-
Cyber Security
1 month ago
Stockholm, Stockholm, Sweden H&M Group Full timeCyber Security & Privacy LeaderAbout the RoleWe are seeking a highly experienced Cyber Security & Privacy Leader to join our team at H&M Group. As a key member of our Cyber Security & Privacy Unit, you will be responsible for leading our cyber security efforts and ensuring the protection of our company's critical data, infrastructure, and customers from...
-
Team Manager
3 weeks ago
Stockholm, Sweden H&M Group Full timeJob Description The Cyber Security & Privacy Unit is the trusted adviser to leaders and key-stakeholders. We provide a broad knowledge of Cyber Security and Data Privacy, our security and privacy strategies, architecture, policies and processes, our business and security roadmaps. We lead, secure, report and support on prioritization of Cyber...