Senior Security GRC Manager

4 weeks ago

Stockholm, Sweden Spotify Full time
Spotify is seeking a Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio who will work closely with our engineering teams and audit functions. You’ll be focused on handling the execution of tasks for the Security GRC Program within Spotify, primarily in relation to driving SOC 2 compliance, but also to other compliance and information security frameworks. You will work on ensuring tasks deliver high-quality value and are completed in a timely fashion. Additionally, you will play an integral part in recommending process improvements and in helping to implement these updates. This role will require a deep understanding of SOC 2 compliance, information security practices, as well as experience in working with technology teams.

What You'll Do

Lead the SOC 2 compliance program and large-scale SOC 2 projects, identify dependencies, define success metrics and achievements, and ensure timely delivery Design, implement, monitor and maintain SOC 2 controls, while collaborating and building relationships with internal and external business partners Lead and handle all stages of SOC 2 audits, ensuring successful completion. Resolve appropriate scope of SOC 2 audits, encompassing new and existing service offerings, their supporting infrastructure, and associated processes. Lead and respond to customer security questionnaires while collaborating with internal teams, and drive questionnaire response automation Identify, assess, and advise on information security risks, processes and controls to a variety of business partners

Who You Are

You have 5+ years of experience with SOC 2 compliance, including leading a SOC 2 compliance program, controls design, and implementation. Experience in the technology industry is preferred. You have 5+ years of experience with security frameworks, SOC 2, ISO27001, NIST CSF, PCI-DSS, etc., security controls design and implementation, and security best practices Prior IT Audit experience in areas of SOC 2, ITGC, SOX are preferred CISA, CISM, CISSP or other related certifications are preferred but not required. You have experience with privacy frameworks, such as GDPR or CCPA You are a strong collaborator, with experience working on teams composed of both technical and non-technical members You have a demonstrated ability to lead large projects, problem-solve, multitask, and have excellent organizational skills You have excellent written and verbal communication skills, with experience presenting to key stakeholders and partnering with internal collaborators and external auditors You thrive in a data-driven, fast-paced and innovative environment

Where You'll Be

For this role you will be in New York.

  • Senior Cyber Security GRC Specialist

    3 weeks ago

    Stockholm, Stockholm, Sweden H&M Group Full time

    Cyber Security GRC RoleWe are seeking a highly skilled Cyber Security GRC professional to join our team at H&M Group. As a key member of our Cyber Security GRC unit, you will play a crucial role in embedding defined standards and regulatory frameworks within information and IT security.Key Responsibilities:Develop and maintain a structured approach to cyber...

  • Security GRC Manager

    2 weeks ago

    Stockholm, Stockholm, Sweden Spotify Full time

    Job Description:Spotify is seeking a Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio. This role will work closely with our engineering teams and audit functions. The ideal candidate will have a deep understanding of SOC 2 compliance, information security practices, and experience working with technology teams.Key...

  • Senior Security Governance Risk and Compliance Manager

    4 weeks ago

    Stockholm, Stockholm, Sweden Spotify Full time

    Job Title: Senior Security Governance, Risk, and Compliance ManagerSpotify is seeking a highly skilled Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio. As a key member of the team, you will work closely with engineering teams and audit functions to drive the execution of tasks for the Security GRC Program.Key...

  • Senior IT GRC Manager

    2 months ago

    Stockholm, Stockholm, Sweden Statkraft Energias Renovaveis SA Full time

    Om rollenVi söker en erfaren Senior IT GRC Manager till vår organisation i Stockholm, Sollefteå eller Östersund. Rollen innebär att du kommer att leda och säkerställa IT- och processkontroll efterlevnad och regelverk inom våra svenska verksamheter.Huvudsakliga ansvarsområdenUtveckla, implementera och underhålla IT- och processkontroll...

  • Senior Cyber Security Professional

    1 week ago

    Stockholm, Stockholm, Sweden H&M Group Full time

    Job Overview We are seeking an experienced Cyber Security GRC Specialist to join our team at H&M Group. In this role, you will play a crucial part in embedding defined standards and regulatory frameworks within information and IT security to ensure risk supervision and business continuity. As a Cyber Security GRC Specialist, you will be strategically...

  • GRC-konsult

    1 month ago

    Stockholm, Stockholm, Sweden Orange Business Services Full time

    Governance, Risk och Compliance konsultVi söker en erfaren GRC-konsult som kan stötta våra kunder i förändringar och löpande verksamhet. Du kommer att arbeta som rådgivare och ansvara för kundprojekt inom Governance, Risk- och Compliance-området.ArbetsuppgifterJobba som rådgivare till våra kunder inom privat- och offentlig sektor.Framtagande av...

  • Senior Security Governance Risk and Compliance Manager

    3 weeks ago

    Stockholm, Stockholm, Sweden Spotify Full time

    Job SummarySpotify is seeking a Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio. The successful candidate will work closely with our engineering teams and audit functions to drive SOC 2 compliance and other compliance and information security frameworks. Key responsibilities include leading the SOC 2 compliance...

  • GRC-rådgivare inom cybersäkerhet

    2 weeks ago

    Stockholm, Stockholm, Sweden Orange Business Services Full time

    Om ossOrange Cyberdefense är en ledande aktör inom cybersäkerhetsområdet. Vår vision är att bidra till ett säkert digitalt samhälle. Vi erbjuder våra kunder tjänster inom flertalet områden från djupgående tekniska lösningar till mer mjukare tjänster som styrning och ledning inom säkerhet, riskmodeller och riskanalyser.I Sverige är vi 400...

  • GRC-konsult

    2 months ago

    Stockholm, Sweden Orange Business Services Full time

    Governance, Risk & Compliance konsult I rollen som GRC-konsult kommer du att jobba som rådgivare till våra kunder och stötta i förändringar och löpande verksamhet. Du ansvarar för kundprojekt i de olika leveranser vi jobbar med inom Governance, Risk- och Compliance-området. Våra kunder kommer från både privat- och offentlig sektor. Exempel...

  • GRC-konsult med fokus på riskhantering och styrning

    3 weeks ago

    Stockholm, Stockholm, Sweden Orange Business Services Full time

    Om rollen som GRC-konsultVi söker en erfaren GRC-konsult med expertis inom riskhantering och styrning. Du kommer att arbeta som rådgivare till våra kunder och stötta dem i förändringar och löpande verksamhet. Du ansvarar för kundprojekt inom Governance, Risk- och Compliance-området.Arbetsuppgifter Jobba som rådgivare till våra kunder inom privat-...

  • Senior IT Security Architect

    3 weeks ago

    Stockholm, Stockholm, Sweden Sobi Full time

    Job Title: Senior IT Security ArchitectAt Sobi, we are seeking a highly skilled Senior IT Security Architect to join our team. As a key member of our security team, you will play a crucial role in safeguarding our company's digital assets, information, and technology infrastructure.Key Responsibilities:Security Architecture and Infrastructure: Drive the...

  • Senior IT Security Specialist

    1 month ago

    Stockholm, Stockholm, Sweden Sobi Full time

    About the RoleSobi is seeking a highly skilled Senior IT Security Technician to join our team. As a key member of our security team, you will play a crucial role in safeguarding our company's digital assets, information, and technology infrastructure.Key ResponsibilitiesDevelop and implement security architecture and technical security operations in...

  • Senior Security Controls Specialist

    2 months ago

    Stockholm, Stockholm, Sweden Borderless Capital Full time

    Senior Security Controls SpecialistWe are seeking a highly skilled Senior Security Controls Specialist to join our team at Klarna. As a key member of our Engineering Assurance team, you will play a critical role in overseeing and strengthening the technical controls within our systems.Key Responsibilities:Collaborate with first-line technical teams to...

  • Security Operations Manager

    4 weeks ago

    Stockholm, Stockholm, Sweden TUI Full time

    About the JobWe are seeking a highly skilled Security Operations Manager to join our team at TUI.Conduct thorough country security risk assessments of existing and potential destinations to ensure the safety of our customers and employees.Develop and maintain the destination-level risk matrix for hotels, excursions, activities, and transfers to mitigate...

  • Security Operations Manager

    4 weeks ago

    Stockholm, Stockholm, Sweden TUI Full time

    About the JobWe are seeking a highly skilled Security Operations Manager to join our team at TUI.Conduct thorough country security risk assessments of existing and potential destinations to ensure the safety of our customers.Develop and maintain destination-level risk matrices for hotels, excursions, activities, and transfers to mitigate potential...

  • Security Operations Manager

    4 weeks ago

    Stockholm, Stockholm, Sweden TUI Full time

    About the JobWe are seeking a highly skilled Security Operations Manager to join our team at TUI. As a key member of our security team, you will be responsible for conducting country security risk assessments, owning the destination level risk matrix, and working closely with our business units to monitor and evaluate security-related data.Key...

  • Senior IT Security Technician

    1 month ago

    Stockholm, Sweden Sobi Full time

    Job DescriptionThis is a vital role at Sobi, protecting digital assets, identifying and mitigating potential threats and ensuring the security of technology infrastructure.As a Senior IT Security Specialist, you will play a crucial role in safeguarding our company's digital assets, information, and technology.  Global Responsibility: Be part of a team with...

  • Senior Security Controls Specialist

    2 months ago

    Stockholm, Stockholm, Sweden Borderless Capital Full time

    About the RoleWe are seeking a highly skilled Senior Security Controls Specialist to join our team at Borderless Capital. As a key member of our Engineering department, you will play a critical part in overseeing and strengthening the technical controls within our systems.Key ResponsibilitiesCollaborate with cross-functional teams to understand system...

  • Senior OT/ICS Security Consultant

    1 month ago

    Stockholm, Sweden Orange Business Services Full time

    Some highlights At Orange Cyberdefense , we’re on a relentless mission to build a safer digital society. As the leading provider of cybersecurity services in Sweden, we believe in pushing the boundaries of what’s possible in securing the world’s OT environment. Our team is a diverse group of experts who are passionate about protecting OT/ICS...

  • Security Strategist

    5 days ago

    Stockholm, Stockholm, Sweden Stillfront Full time

    About the RoleWe are seeking a seasoned Cybersecurity Executive to lead our information security efforts and drive risk management across our global digital ecosystem.ResponsibilitiesDevelop and execute a comprehensive information security strategy that aligns with our business objectives and risk appetite.Oversee the implementation of security measures to...