Cybersäkerhetsspecialist - Lediga jobb

På Sourcecom får du unika utvecklingsmöjligheter i ett konsultbolag med familjär stämning och låg personalomsättning. Här blir du en del av en tekniskt driven miljö där du arbetar tillsammans med erfarna kollegor och varierade kunder inom olika branscher. Sök rollen idag – urval sker löpande!

Om tjänsten

Sourcecom är en strategisk partner inom IT och säkerhet, med stark teknisk kompetens och lång erfarenhet av att leverera stabila och effektiva IT-miljöer till sina kunder.

Som IT-infrastrukturspecialist arbetar du som konsult i uppdrag där du ansvarar för drift, förvaltning och implementation av moderna IT-miljöer. Rollen är bred och tekniskt orienterad, med fokus på stabilitet, prestanda och förbättring av lösningar. Du blir en del av ett sammansvetsat team om cirka 12 konsulter.

Du erbjuds

• En familjär arbetsplats med högt i tak
• Möjligheter till personlig och professionell utveckling genom utbildningar och certifieringar
• 6 veckors semester, privat sjukvårdsförsäkring, friskvårdsbidrag och tjänstepension

Arbetsuppgifter

I rollen arbetar du med att säkerställa stabil och effektiv drift av kunders IT-miljöer samt bidra till utveckling och förbättring. Dina arbetsuppgifter kommer att inkludera:

• Drifta, förvalta och optimera IT-infrastruktur
• Arbeta med Linux (t.ex. Red Hat) och virtualisering (t.ex. VMware, Hyper-V)
• Arbeta med containerplattformar och automatisering (t.ex. Ansible, Puppet, Infrastructure as Code)
• Felsöka och förbättra prestanda i komplexa miljöer
• Arbeta med logghantering och övervakning
• Delta i projekt och utveckla tekniska lösningar
• Rådvigning till kund

Vi söker dig som

• Har minst 4 års erfarenhet inom IT-infrastruktur
• Har erfarenhet av Linux och virtualisering
• Har arbetat med drift, felsökning och optimering av IT-miljöer
• Har erfarenhet av automation eller scriptbaserad hantering
• Är flytande i svenska och engelska i tal och skrift

Det är meriterande om du har:

• Erfarenhet av containerlösningar (t.ex. Kubernetes/OpenShift)
• Erfarenhet av Infrastructure as Code

Vår rekryteringsprocess

Denna rekryteringsprocess hanteras av Academic Work och vår kunds önskemål är att alla frågor rörande tjänsten skickas till Academic Work.

Vi tillämpar löpande urval och kommer plocka ner annonsen när tillräckligt många kandidater har nått slutskedet i rekryteringsprocessen. Vid ansökan efterfrågas ett CV. Personligt brev använder vi inte som urvalsmetod och behöver därför inte bifogas. Rekryteringsprocessen innehåller två urvalstest: ett personlighetstest och ett test i kognitiv förmåga. Testerna är ett verktyg för att kunna hitta den kandidat med högst potential för tjänsten samt främja jämlikhet, mångfald och en rättvis rekryteringsprocess.

Build Your Future in Information Security Management

Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you!

About the Internship

Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification.

What You'll Learn

As an intern, you will:

• Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit.

• Learn how information security risk assessments are run and turned into a practical risk treatment plan.

• Help draft the policies, procedures and records that make up a working ISMS.

• Support internal audits and management reviews, and see how findings are followed up and closed.

• Gain hands-on experience with the Annex A controls and how they are applied in real organisations.

This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it.

Why Join Us?

• Hands-on experience with real ISO 27001 implementations, from first workshop to certification.

• Guidance and mentorship from experienced ISMS consultants and lead implementers.

• Exposure to a wide range of clients and industries across Sweden and the Nordics.

• A collaborative and supportive environment where questions are always welcome.

Who We're Looking For

We welcome interns who:

• Have a strong interest in information security, risk management and governance.

• Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works.

• Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning.

• Understand the basics of risk assessment: assets, threats, likelihood and impact.

• Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish.

• Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order.

• Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement.

• Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers.

• Are ready to contribute ideas and collaborate with a dynamic team.

• Approach client information with care, discretion and a strong ethical mindset.

How to Apply

Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role.

It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on.

Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg.

Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security!

Join us, and let's build a safer digital world together!

På Sourcecom får du unika utvecklingsmöjligheter i ett konsultbolag med familjär stämning och låg personalomsättning. Här blir du en del av en tekniskt driven miljö där du arbetar tillsammans med erfarna kollegor och varierade kunder inom olika branscher. Sök rollen idag – urval sker löpande!

Om tjänsten

Sourcecom är en strategisk partner inom IT och säkerhet, med stark teknisk kompetens och lång erfarenhet av att leverera stabila och effektiva IT-miljöer till sina kunder.

Som IT-infrastrukturspecialist arbetar du som konsult i uppdrag där du ansvarar för drift, förvaltning och implementation av moderna IT-miljöer. Rollen är bred och tekniskt orienterad, med fokus på stabilitet, prestanda och förbättring av lösningar. Du blir en del av ett sammansvetsat team om cirka 12 konsulter.

Du erbjuds

• En familjär arbetsplats med högt i tak
• Möjligheter till personlig och professionell utveckling genom utbildningar och certifieringar
• 6 veckors semester, privat sjukvårdsförsäkring, friskvårdsbidrag och tjänstepension

Arbetsuppgifter

I rollen arbetar du med att säkerställa stabil och effektiv drift av kunders IT-miljöer samt bidra till utveckling och förbättring. Dina arbetsuppgifter kommer att inkludera:

• Drifta, förvalta och optimera IT-infrastruktur
• Arbeta med Linux (t.ex. Red Hat) och virtualisering (t.ex. VMware, Hyper-V)
• Arbeta med containerplattformar och automatisering (t.ex. Ansible, Puppet, Infrastructure as Code)
• Felsöka och förbättra prestanda i komplexa miljöer
• Arbeta med logghantering och övervakning
• Delta i projekt och utveckla tekniska lösningar
• Rådvigning till kund

Vi söker dig som

• Har minst 4 års erfarenhet inom IT-infrastruktur
• Har erfarenhet av Linux och virtualisering
• Har arbetat med drift, felsökning och optimering av IT-miljöer
• Har erfarenhet av automation eller scriptbaserad hantering
• Är flytande i svenska och engelska i tal och skrift

Det är meriterande om du har:

• Erfarenhet av containerlösningar (t.ex. Kubernetes/OpenShift)
• Erfarenhet av Infrastructure as Code

Vår rekryteringsprocess

Denna rekryteringsprocess hanteras av Academic Work och vår kunds önskemål är att alla frågor rörande tjänsten skickas till Academic Work.

Vi tillämpar löpande urval och kommer plocka ner annonsen när tillräckligt många kandidater har nått slutskedet i rekryteringsprocessen. Vid ansökan efterfrågas ett CV. Personligt brev använder vi inte som urvalsmetod och behöver därför inte bifogas. Rekryteringsprocessen innehåller två urvalstest: ett personlighetstest och ett test i kognitiv förmåga. Testerna är ett verktyg för att kunna hitta den kandidat med högst potential för tjänsten samt främja jämlikhet, mångfald och en rättvis rekryteringsprocess.

Build Your Future in Information Security Management

Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you!

About the Internship

Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification.

What You'll Learn

As an intern, you will:

• Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit.

• Learn how information security risk assessments are run and turned into a practical risk treatment plan.

• Help draft the policies, procedures and records that make up a working ISMS.

• Support internal audits and management reviews, and see how findings are followed up and closed.

• Gain hands-on experience with the Annex A controls and how they are applied in real organisations.

This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it.

Why Join Us?

• Hands-on experience with real ISO 27001 implementations, from first workshop to certification.

• Guidance and mentorship from experienced ISMS consultants and lead implementers.

• Exposure to a wide range of clients and industries across Sweden and the Nordics.

• A collaborative and supportive environment where questions are always welcome.

Who We're Looking For

We welcome interns who:

• Have a strong interest in information security, risk management and governance.

• Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works.

• Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning.

• Understand the basics of risk assessment: assets, threats, likelihood and impact.

• Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish.

• Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order.

• Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement.

• Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers.

• Are ready to contribute ideas and collaborate with a dynamic team.

• Approach client information with care, discretion and a strong ethical mindset.

How to Apply

Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role.

It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on.

Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg.

Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security!

Join us, and let's build a safer digital world together!

Build Your Future in Information Security Management

Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you!

About the Internship

Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification.

What You'll Learn

As an intern, you will:

• Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit.

• Learn how information security risk assessments are run and turned into a practical risk treatment plan.

• Help draft the policies, procedures and records that make up a working ISMS.

• Support internal audits and management reviews, and see how findings are followed up and closed.

• Gain hands-on experience with the Annex A controls and how they are applied in real organisations.

This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it.

Why Join Us?

• Hands-on experience with real ISO 27001 implementations, from first workshop to certification.

• Guidance and mentorship from experienced ISMS consultants and lead implementers.

• Exposure to a wide range of clients and industries across Sweden and the Nordics.

• A collaborative and supportive environment where questions are always welcome.

Who We're Looking For

We welcome interns who:

• Have a strong interest in information security, risk management and governance.

• Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works.

• Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning.

• Understand the basics of risk assessment: assets, threats, likelihood and impact.

• Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish.

• Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order.

• Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement.

• Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers.

• Are ready to contribute ideas and collaborate with a dynamic team.

• Approach client information with care, discretion and a strong ethical mindset.

How to Apply

Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role.

It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on.

Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg.

Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security!

Join us, and let's build a safer digital world together!

Build Your Future in Information Security Management

Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you!

About the Internship

Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification.

What You'll Learn

As an intern, you will:

• Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit.

• Learn how information security risk assessments are run and turned into a practical risk treatment plan.

• Help draft the policies, procedures and records that make up a working ISMS.

• Support internal audits and management reviews, and see how findings are followed up and closed.

• Gain hands-on experience with the Annex A controls and how they are applied in real organisations.

This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it.

Why Join Us?

• Hands-on experience with real ISO 27001 implementations, from first workshop to certification.

• Guidance and mentorship from experienced ISMS consultants and lead implementers.

• Exposure to a wide range of clients and industries across Sweden and the Nordics.

• A collaborative and supportive environment where questions are always welcome.

Who We're Looking For

We welcome interns who:

• Have a strong interest in information security, risk management and governance.

• Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works.

• Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning.

• Understand the basics of risk assessment: assets, threats, likelihood and impact.

• Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish.

• Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order.

• Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement.

• Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers.

• Are ready to contribute ideas and collaborate with a dynamic team.

• Approach client information with care, discretion and a strong ethical mindset.

How to Apply

Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role.

It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on.

Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg.

Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security!

Join us, and let's build a safer digital world together!

Build Your Future in Information Security Management

Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you!

About the Internship

Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification.

What You'll Learn

As an intern, you will:

• Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit.

• Learn how information security risk assessments are run and turned into a practical risk treatment plan.

• Help draft the policies, procedures and records that make up a working ISMS.

• Support internal audits and management reviews, and see how findings are followed up and closed.

• Gain hands-on experience with the Annex A controls and how they are applied in real organisations.

This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it.

Why Join Us?

• Hands-on experience with real ISO 27001 implementations, from first workshop to certification.

• Guidance and mentorship from experienced ISMS consultants and lead implementers.

• Exposure to a wide range of clients and industries across Sweden and the Nordics.

• A collaborative and supportive environment where questions are always welcome.

Who We're Looking For

We welcome interns who:

• Have a strong interest in information security, risk management and governance.

• Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works.

• Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning.

• Understand the basics of risk assessment: assets, threats, likelihood and impact.

• Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish.

• Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order.

• Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement.

• Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers.

• Are ready to contribute ideas and collaborate with a dynamic team.

• Approach client information with care, discretion and a strong ethical mindset.

How to Apply

Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role.

It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on.

Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg.

Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security!

Join us, and let's build a safer digital world together!

Build Your Future in Information Security Management

Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you!

About the Internship

Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification.

What You'll Learn

As an intern, you will:

• Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit.

• Learn how information security risk assessments are run and turned into a practical risk treatment plan.

• Help draft the policies, procedures and records that make up a working ISMS.

• Support internal audits and management reviews, and see how findings are followed up and closed.

• Gain hands-on experience with the Annex A controls and how they are applied in real organisations.

This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it.

Why Join Us?

• Hands-on experience with real ISO 27001 implementations, from first workshop to certification.

• Guidance and mentorship from experienced ISMS consultants and lead implementers.

• Exposure to a wide range of clients and industries across Sweden and the Nordics.

• A collaborative and supportive environment where questions are always welcome.

Who We're Looking For

We welcome interns who:

• Have a strong interest in information security, risk management and governance.

• Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works.

• Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning.

• Understand the basics of risk assessment: assets, threats, likelihood and impact.

• Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish.

• Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order.

• Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement.

• Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers.

• Are ready to contribute ideas and collaborate with a dynamic team.

• Approach client information with care, discretion and a strong ethical mindset.

How to Apply

Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role.

It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on.

Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg.

Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security!

Join us, and let's build a safer digital world together!

Build Your Future in Information Security Management

Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you!

About the Internship

Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification.

What You'll Learn

As an intern, you will:

• Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit.

• Learn how information security risk assessments are run and turned into a practical risk treatment plan.

• Help draft the policies, procedures and records that make up a working ISMS.

• Support internal audits and management reviews, and see how findings are followed up and closed.

• Gain hands-on experience with the Annex A controls and how they are applied in real organisations.

This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it.

Why Join Us?

• Hands-on experience with real ISO 27001 implementations, from first workshop to certification.

• Guidance and mentorship from experienced ISMS consultants and lead implementers.

• Exposure to a wide range of clients and industries across Sweden and the Nordics.

• A collaborative and supportive environment where questions are always welcome.

Who We're Looking For

We welcome interns who:

• Have a strong interest in information security, risk management and governance.

• Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works.

• Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning.

• Understand the basics of risk assessment: assets, threats, likelihood and impact.

• Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish.

• Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order.

• Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement.

• Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers.

• Are ready to contribute ideas and collaborate with a dynamic team.

• Approach client information with care, discretion and a strong ethical mindset.

How to Apply

Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role.

It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on.

Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg.

Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security!

Join us, and let's build a safer digital world together!

About the Role

We are looking for a Security & Compliance Engineer to help ensure security across our internal digital landscape. Reporting to Tacton’s Security & Compliance Manager, you will play a key role in ensuring that our systems, integrations, data flows, and vendor ecosystem are secure by design and in operation.

This role focuses on internal systems and corporate security architecture, including infrastructure, integrations, and third-party services. You will combine architectural thinking with hands-on expertise and act as a trusted partner to IT, Engineering, and business stakeholders.

You will have a direct impact on how we design, connect, and secure our systems as we continue to grow globally. This is a high-impact role for someone who understands modern digital environments and how to secure them end-to-end.

What You Will Do Internal Security & Risk

• Lead security assessments of systems, integrations, and data flows

• Conduct technical risk analyses for system implementations and vendor onboarding

• Perform threat modelling and security reviews

• Define and implement security requirements for infrastructure and cloud environments

• Help establish and maintain security guardrails across identity, access, encryption, and integrations

• Proficiency in risk management

• Knowledge of emerging cybersecurity threats and trends

Vendor & Third-Party Security

• Define and enforce security requirements in procurement processes

• Conduct supplier security assessments and due diligence

• Evaluate third-party risks from a cybersecurity perspective

Governance & Compliance

• Maintain alignment with ISO 27001 and SOC 2 Type II

• Contribute to policies, standards, and security guidelines

• Support incident investigations

• Act as a subject matter expert in audits and internal forums

What Will Help You Thrive

• 5+ years of experience in cybersecurity, information security, or a related field

• Strong technical foundation in cloud, networking, identity & access management, and system integrations

• Strong communication and stakeholder management skills

• Experience conducting technical risk assessments and security reviews

• Familiarity with ISO 27001 and SOC 2 Type II

• Ability to understand complex system landscapes and data flows

• Comfortable working cross-functionally with IT, Engineering, and Legal

• Certifications such as CISSP, CISM, or CISA are a plus

• Degree in Computer Science, Engineering, or a related field

Who We’re Looking For We’re looking for someone with a strong hands-on, doer mentality who is focused on getting things done and creating real impact. You are pragmatic, prestigeless, and motivated by outcomes. You thrive in dynamic environments where responsibilities are broad, and you feel comfortable navigating uncertainty and solving problems independently. You are curious by nature, proactive in your approach, and continuously looking to learn and improve both yourself and the way things are done.

Why Tacton?

• At Tacton, we’ve been building CPQ software for over 20 years. We’re a stable company with global customers and a product that’s central to how manufacturers sell

• We offer competitive benefits, flexibility in how we work, and a culture that values learning and collaboration

• A solid and stable company with over 20 years of industry experience.

• Flexible hybrid setup - 3x a week at the office

• 33 days of paid time off – 30 vacation days plus 3 extra to make sure you get the rest you deserve.

• Premium occupational pension – Our pension plan goes beyond ITP1, with higher employer contributions depending on your age and salary level.

• Generous wellness allowance – 5,000 SEK annually to support your health and wellbeing.

• Private healthcare insurance – Skip the waiting lines and get quick access to private medical care, including specialist consultations and treatments.

• Parental leave top-up – We top up your parental leave so you receive up to 90% of your base salary for up to 6 months, helping you focus on your family without financial stress

• Weekly treats – Fika one week, breakfast the next, because good food brings people together.

This role is based in Stockholm, where we have invested in creating our unique home right next to Hötorget station.

Tacton is a leading Software as a Service company trusted by global manufacturers. We got started in the late 1990s when six computer scientists figured out a revolutionary way to help Manufacturers overcome their most business-critical, product configuration challenges. Since those early days, we have grown to support global manufacturers seeking to thrive in a changing world.

We invite you to find out more about us @ www.tacton.com/about