Security and information consultant
Description
emagine is looking for a Security and information consultant to our amazing client in Stockholm
Start: asap (one month notice could work)
Duration. 6 months
Workload: 80 - 100%
Work Description
The consultant will play a key role in supporting the client’s information security posture and it's digital transformation journey. The primary focus will be to support the company’s internal ISO 27001 procedures (such as risk management, asset management, updating documentation and policies for the ISMS, support with security training, etc.), handle ongoing security operations, and respond to customer RFPs with the use of an AI-driven RFP management platform. The role requires a hands-on, structured, and collaborative approach, working closely with internal stakeholders and external partners.
Responsibilities:
ISO 27001 Certification Lead:
Own and support org in execution of all activities related to the company’s ISO 27001 certification process.
Support with review of policies and procedures, ensuring compliance with ISO requirements.
Liaise with auditors and ensure timely preparation of evidence and documentation.
Support organization with sustainable ISMS (Information Security Management System) framework approach for ongoing compliance and continuous improvement.
Security and GDPR Operations Support:
Manage incoming information security support requests and incidents, ensuring prompt response and resolution.
Provide expert guidance on security best practices and risk mitigation.
Collaborate with IT and business teams to improve security controls and awareness across the organization.
Prioritize tasks based on their assessed urgency.
RFP Responses:
Respond to RFPs, leveraging support of our AI-based Request for Proposal (RFP) management platform.
Update business and technical documentation as you go, coordinate with system vendor, and oversee continued implementation activities.
Ensure alignment with data security, privacy, and compliance standards.