IT Security & Risk Officer

Avaron AB is a growing consultancy that matches your expertise with the market's most interesting assignments, offering a platform where your professional development is central.

We are looking for a proactive IT Security & Risk Officer to strengthen cybersecurity, risk management, and compliance across a global organization. The role is cross-functional and combines strategic development with hands-on execution, with the goal of improving cybersecurity capabilities, reducing business risk, and enabling continued business value delivery.

• Perform and quality assure threat analysis and risk assessments (TARAs).
• Participate in and support security audits.
• Support operational cybersecurity processes in a global environment.
• Drive and promote a Security by Design culture.
• Support compliance work related to ISO 27001, NIS2, UNECE R155/R156, and related standards and regulations.
• Apply lean governance principles to improve efficiency while maintaining a strong risk posture.
• Collaborate with Enterprise Architecture and cross-functional DevSecOps teams to align security, architecture, product development, and operational stakeholders.

• Strong background in risk assessment, threat analysis (TARA), and security auditing.
• Ability to review modern cloud services from a security architecture perspective.
• Understanding of security best practices to meet CIA (confidentiality, integrity, and availability) requirements.
• Experience with relevant standards and regulations (e.g., GDPR, ISO 27001, NIS2, CRA, UNECE R155/R156).
• Operational cybersecurity experience in a global environment.
• Professional proficiency in English.

• AWS experience.
• Automotive industry experience.
• Background in agile environments.
• Skills in incident response, crisis management, or forensics.

Selections are made on an ongoing basis, so we recommend that you apply as soon as possible.