Head of Security Governance, Risk and Compliance

Security has a significant impact on privacy, consumer confidence, reputation, and it is a priority on the global agenda. As Head of Security Governance, Risk, and Compliance (GRC) you will take a lead role in the continued innovation of Telia Company´s security strategy and drive best in class security governance, risk, and compliance function. In this key leadership role, you will perform as a strategic enabler with a focus on operational excellence in close collaboration with teams working across Nordics and the Baltics.
Is this your next opportunity?
This is a leadership role based on principles of enablement, orchestration, and facilitation that inspires and leads security teams responsible for identifying, evaluating, and reporting on security risks and threats. This needs to be compatible with Telia Company´s strategic direction and GRC requirements both covering internal and external perspectives.
You will lead a smaller team that can be expanded to around 10 people over time. Your focus will be to enhance security measures by data and risk-driven processes to balance risk exposure, business values, vulnerabilities, and threats.
My name is Johan Holback, and I am in the group security leadership team and leading this recruitment. The role will be in the same leadership team, and you will be my peer there. In Telia Company’s transformation, security is extremely important, it is about getting all employees and stakeholders on the journey, to be clear in why and how we need to have certain levels of security, from privacy to national security requirements. Here the GRC role is essential.
As a part of the security leadership team within Telia Group Security, you will be working proactively with various clients, business units, and internal departments to implement practices that meet Telia Company´s defined governance and standards. Your role will require you to become a member of various governance, compliance, and incident response groups and transformation programs. The GRC team is responsible for providing overview and governance for all security-related activities within Telia Company and ensuring management awareness, risk prioritization, and compliance posture of the overall security environment within Telia Company.
The role includes, but is not limited to:
Developing processes, enabling teams, motivating colleagues, driving change, and supporting strategic security journey for Telia Company
Providing management overview and serving as the lead point of contact for Security Governance, Risk and Compliance team
Taking full ownership of security governance, risk and performance indicators, 3rd party security risk management, regulatory audits, and compliance (NIST, CIS, ISO2700X, etc.), GRC platform integration, cyber insurances, management reporting, and GRC assessment of M&A
Responsibility to develop and streamline security risk management using continuous self-assessments, mitigations initiatives, and executive reporting
Providing support to measure security risk posture across Telia Company
Ongoing engagement with leadership teams and businesses to perform security assessments and ensure timely execution of programs to mitigate security risks and threats
Aligning and collaborating with the 3rd party security risk management programs and working in an integrated manner with supply chain function
Continuously evaluating security controls to ensure effectiveness, compliance, and adherence to policies and key controls

In our ever-changing environment, we need leaders and teams who dare to challenge the current, simplify the complex, and care for our co-workers, customers, and our society. We don’t believe in rigid hierarchies, rather in people who thrive within a self-leadership culture.
We set high goals for our business and ourselves. Through constant feedback and regular coaching, our leaders ensure we are on the right path. That is why we want driving and skilled people like you to join us in continuing to make our goals a reality.
Is this you?
We see that you have solid experience within Governance, Risk, and Compliance, either from industry or management consulting, and a proven track record of leading teams and deliverables of business-risk-oriented technology assessments and compliance initiatives. You have hands-on leadership experience in authorizing security policies, developing standards, risk assessments, compliance, and regulative reviews.
Your personal competencies:
You envision a better future by being curious, imagining new ways, and thinking critically. You engage to inspire impact by understanding and inspiring others and by building support for change. You enable our people both by developing others and yourself, and together we collaborate with impact. You execute and get things done by creating conditions for success, leading for results, and you are not afraid to make courageous decisions.
In this role, you will constantly analyze our existing solutions and guide development into future solutions based on context. Therefore you need to have a problem-solving mindset.
You will need to navigate broad within the company and find new ways forward, including key stakeholders, listening to experts, and guiding management.
Your Experience:
Bachelor or master’s degree in engineering, Economics/Audit or Computer Science
Great leadership skills to drive changes, value proposition, and return on investments
Relevant security certifications (CISSP, CISM, ISO 27001/02, etc.) is an advantage but not a mandatory requirement
Experience in managing large security teams within an international environment
Ability to establish and sustain effective professional relationships with all relevant stakeholders covering business, technology, partners, customers, regulators, institutions, etc.
Solid knowledge on GRC security platforms and how to integrate security tools eco-system mapped to business needs

Interested?
Selection will take place on an ongoing basis and this position might be filled before the application deadline. Application deadline is February 7th, 2022.
In this recruitment we will perform an extended security check and background checks as part of the process.
Welcome to Telia – Home to your next big opportunity!