Senior IT Security Officer

Role Purpose

Key Accountabilities

Stakeholder Management & Advisory 

• Act as a trusted advisor to business, technology, product, and security stakeholders. 
• Build strong relationships with senior stakeholders and influence risk-based decision-making. 
• Translate complex security and risk topics into clear business language. 
• Support teams in applying security policies, standards, and control requirements in context. 
• Promote a pragmatic, service-minded, and risk-based approach to security. 

Governance, Compliance & Reporting 

• Support the operationalization of IT security governance frameworks, policies, and standards. 
• Contribute to audit, compliance, and control assessment activities. 
• Prepare clear risk reporting, decision material, and leadership updates. 
• Identify recurring risk themes, control gaps, and opportunities for improvement. 
• Support continuous improvement of risk management processes, templates, and governance materials. 

Leadership & People Management 

• Provide guidance, coaching, and support to junior security colleagues. 
• Contribute to workload planning, prioritization, and quality review of risk activities. 
• Support knowledge sharing and development of common ways of working. 
• Potentially act as a people manager, depending on organizational needs. 
• Help build a collaborative, high-performing, and service-oriented security risk capability. 

Expected Outcomes 

• Key IT security risks are clearly identified, documented, owned, and followed up. 
• Stakeholders receive practical and business-aligned security risk advice. 
• Risk decisions are better informed, consistent, and aligned with governance expectations. 
• Security reporting provides useful insight into risk posture, trends, and remediation progress. 
• Security risk management practices become more consistent, scalable, and effective. 
• Junior colleagues receive appropriate guidance, coaching, and support. 

Required Competencies

• Strong understanding of IT security, risk management, governance, and security controls. 
• Ability to lead risk assessments and translate findings into practical actions. 
• Strong stakeholder management and influencing skills. 
• Clear communication skills with both technical and non-technical audiences. 
• Good understanding of security frameworks, policies, standards, and compliance expectations. 
• Strong analytical mindset and ability to prioritize based on risk and business impact. 
• Ability to work independently and guide others. 
• Service-minded, pragmatic, and collaborative approach. 

Experience 

• 15+ years of experience in IT security, cybersecurity risk management, IT governance, audit, compliance, or related areas. 
• Experience working with senior stakeholders, technology teams, product teams, or governance forums. 
• Experience leading risk assessments, remediation follow-up, reporting, or control improvement activities. 
• Experience coaching junior colleagues or contributing to people leadership is beneficial. 
• People management experience is a plus, but not mandatory. 

Education 

• Formal education in IT, cybersecurity, information systems, risk management, audit, or a related field is beneficial. 
• Equivalent professional experience, relevant certifications, or demonstrated practical knowledge may be considered in place of formal education. 

Ready for the next move?

Are you excited to bring your skills and disruptive ideas to the table? We can’t wait to hear from you. Apply today! 

At Volvo Group, we believe in the value of in-person collaboration and connection. Our general principle is that employees work from the office. 

We look forward to receiving your application! The final date to apply is July 24.

Volvo Group never requests any form of payment or fees from candidates at any stage of the recruitment process. Any such demand is a scam. To view the authentic job description and apply securely, please visit: Jobs at Volvo Group