Information Security Engineer hos Consilium i Göteborg

In practice, the role is split into two central pillars:

Operational Excellence: Working hands-on to implement security controls, managing daily security activities, and acting as an internal subject matter expert.

Strategic and Compliance-Oriented Leadership: Developing and driving our security strategy, ensuring we meet regulatory requirements, and continuously strengthening our security posture.

You will help protect Consilium's information assets, lead compliance efforts related to NIS2, and support alignment with frameworks such as NIST CSF, ISO 27001, the EU CRA, and the AI Act. The role works closely with teams across IT, HR, R&D, Sales, and Marketing.

Your Main Responsibilities

In this role, you will manage day-to-day security operations activities as well as strengthening the ISMS, implement controls aligned with ISO 27001, NIS2, and NIST CSF, coordinate audits, develop policies, and provide risk reporting and advisory support across the business.

Requirements

Technical Environment: Solid understanding of Microsoft Defender suite, Azure/O365, Windows, and Linux.

Networking & Security Tools: Strong knowledge of TCP/IP, segmentation, firewalls, SIEM, EDR/EPP, and patch management.

Automation: Basic to intermediate scripting skills (PowerShell, Python, Bash, KQL, or Graph API).

Incident & Frameworks: Experience with log analysis, incident lifecycles, and frameworks like ISO 27001 or NIST CSF.

Communication: Ability to explain technical security concepts clearly to non-technical stakeholders.

Meriting

Hands-on experience with Microsoft's advanced security stack (Sentinel, XDR, Entra, Intune, Purview/Priva).

Cloud security controls (Azure), DevSecOps (GitHub Advanced Security), or direct audit-evidence collection experience.

Previous experience working with audits and evidence collection linked to ISO 27001/NIS2/NIST CSF.

Who Are We Looking For?

We are looking for someone with hands-on experience in IT security and information security compliance, along with a solid understanding of relevant regulations and security frameworks. You are structured, analytical, and able to communicate clearly with a wide range of stakeholders.

Personal Attributes

You are analytical, proactive, and solution-oriented, with high integrity and a structured way of working. You communicate clearly, work well independently, and build strong relationships across technical and non-technical teams.