GRC Specialist

We are seeking a skilled GRC Specialist - Stockholm to join our team at H&M Group. In this role, you will play a key part in our Cyber Security GRC unit, which is responsible for embedding defined standards and regulatory frameworks within information and IT security.

Your key responsibilities will include auditing compliance, overseeing the identification, assessment, and mitigation of technology and cybersecurity risks, and working closely with internal and external stakeholders to drive effective risk management and compliance practices.

We are looking for four senior team members to join our GRC unit, each with a focus area:

• Risk Officer: Keeping H&M Group's Cyber Security Risk Management Framework up to date and driving continuous risk work.
• Compliance Officer: Maintaining the Cyber Security Common Control Framework and designing the annual Audit Plan and Program.
• Resilience Officer: Developing H&M Group's Cyber Security Resilience Work and implementing a systematic risk-based approach.
• GRC Officer: Working across all GRC areas and assisting with day-to-day tasks and improvement initiatives.

Key qualifications include strong experience in helping a global organization adopt a robust, resilient, and maintainable approach to modern tech or cyber security, high knowledge of legal regulations, international standards, and best practices within cyber security risk management, and experience working with Qualified Security Assessors (QSA) and auditors.