Information Security GRC Analyst

Stockholm - Sweden

Monthly Salary: Not Disclosed

Posted on: 8 hours ago

Vacancies: 1 Vacancy

Job Summary

Odevo is a group of exciting brands with a shared vision of challenging status quo in the property management industry. We are committed to revolutionizing the industry with innovative software solutions that make managing properties easier more efficient and more effective. Our rapidly growing product and engineering organization now includes around 200 highly skilled professionals.

Our cloud-based platform is unique and in a brief time we have proven ourselves as a leading and innovative player on the market. Our product development department acts as a SaaS supplier to all the companies in the Odevo group and several other players in the industry. Together we will continue to challenge and change this industry. To continue our ambitious growth journey we seek more great people to join us to build market-leading property management software products. Are you one of them

About the role

Join our dynamic team at Odevo as a passionate Information Security GRC Analyst and play a pivotal role in fortifying our information security landscape! We are on the lookout for a talented individual who is eager to contribute to Odevos this exciting position youll have the opportunity to design and lead our supplier due diligence program craft engaging security awareness training and orchestrate realistic phishing simulations. Youll also be instrumental in shaping a robust information security governance framework and supporting the development and upkeep of our disaster recovery (DR) plans. Additionally youll ensure our sub-businesses are aligned with our security standards making a significant impact on our overall compliance. If youre ready to take on a challenge and make a true difference we want to hear from you

Key Responsibilities:

Supplier Due Diligence Program:

Develop and implement a risk-based supplier due diligence program.

Assess supplier security practices and ensure compliance with company standards.

Security Awareness Training:

Implement and manage security awareness training programs.

Create and send phishing simulation emails to test employee awareness.

Analyze results and produce metrics to identify areas for improvement.

Information Security Policies:

Create and manage information security policies to ensure compliance and best practices.

Disaster Recovery (DR) Plans:

Support the creation and maintenance of disaster recovery plans.

Collaborate with stakeholders to ensure DR plans are comprehensive and effective.

Track Compliance to Security Initiatives:

Work with IT representatives to monitor compliance with Odevo baselines for security implementations in the cloud and across security tooling.

Report on compliance to management

Who You Are:

You possess strong communication skills enabling you to effectively engage with both technical and non-technical stakeholders. Your detail-oriented nature and proactive approach to problem-solving and solution design make you adept at working with security GRC challenges translating them into clear and actionable security insights. You are fluent in English and it is an added bonus if you know additional languages such as Spanish Italian Portuguese German Swedish or Finnish.

Experience:

2 years of proven experience in a similar role.

Excellent analytical problem-solving and communication skills.

Proven experience in information security assurance with a focus on supplier due diligence and security awareness training.

Strong understanding of information security policies and best practices.

Experience in conducting phishing simulations and analysing results.

Some understanding of security certifications frameworks and regulations (e.g ISO27001 NIST Cyber Framework NIS2 DORA).

Desired experience (but not required):

Technical knowledge of security principles concepts and technologies.

Previous experience in aligning to security certifications and regulations (e.g ISO27001 NIS2 DORA)

Familiarity with disaster recovery planning and implementation.

Degree in Risk Management Information Security or a related field.

Relevant certifications in Information Security GRC or related fields.

What we offer

Professional growth - to work with the most talented developers in the industry.
Modern technology - we invest in the latest technologies and tools and encourage our team members to share their ideas and take ownership of their work.
Innovation - to work on exciting projects that push the boundaries of our industry and make a real impact.
Commitment to quality - a dynamic and forward-thinking company that values profitable and long-term product development.

Excited
If you are excited about being part of a successful team apply for this position!

Why we formed Odevo
About Odevo
Our Software

#msl