Information security officer

We’re looking for an IT Security specialist to join our Information Security & Risk Management (ISRM) team in its mission to protect our information assets for us to be a trusted partner for our customers and merchants. The ISRM team is a vital part of Technology at Qliro, working with and supporting the whole organization as responsible stakeholder for the information security governance, cyber security, data privacy and business continuity. You will report to Head of ISRM and will work with colleagues that are highly collaborative, efficient, enthusiastic about what they do and dare to learn and explore new things.

In the Information Security Officer role, your main responsibilities will be to develop and maintain our existing Information Security Policy Framework, Business Continuity Framework and GDPR-related documentation. You will also support our overall work such as orchestrating various Awareness Campaigns, create tools and solutions, and perform Internal Reporting and Reviews. You will get to autonomously deliver results based on set goals. Therefore, we expect you to be process oriented, organized, have good theoretical, communicative and administrative skills. You will also have an opportunity and be supported in maintaining your relevant skills.

Qliro has a track record of delivering new products and services at unmatched speed. We are active in an exciting intersection of the e-commerce, payment and financial services markets. We target both leading online merchants and millions of Nordic consumers seeking superior digital payments and consumer finance products.

What you’ll do and work with:

- The Information Security Officer supports the information security, risk management and privacy work across Qliro's organisation. The aim is to protect Qliro's assets and comply with all legal requirements within the information security, risk management and privacy areas
- Actively review, test and monitor key information security and risk management controls
- Supports Head of ISRM in gathering and reporting data to executive management team
- In everyday work you will be closely cooperating with our IT Security Specialist and various stakeholders throughout the business - Risk, Legal, Tech.
- Identify risks and propose mitigation controls
- Support on the discussion of issues and initiatives with the different functions of the organisation
- Develop and maintain our existing Information Security Policy Framework, Business Continuity Framework and GDPR-related documentation
- Support on Information Security, Risk Management and GDPR implementation and monitorization
- Participate in all InfoSec and Privacy forums and committees when assigned
- Support on the definition of the Information Security and Business Continuity strategy
- Prepare and conduct InfoSec and Privacy related trainings



This is an exciting 12-month project opportunity for you to join our ISRM team, with the
possibility of extension.



We believe you:

Are a person who can take own initiatives and collaborate within a team and across the organization. We also believe that you have a passion for information security and enjoy influencing your surroundings. You keep yourself updated with the latest trends and development in the Information security and Privacy area. You have experience in pitching or demonstrating across all levels in the organization and have excellent communication skills (both verbal and written) in English. You are also prepared to learn and absorb a significant amount of information in a short period of time.

- Have an academic degree in computer science or similar, in a topic related to information or cyber security.
- Understanding and knowledge of main frameworks that we will use on our day-to-day tasks such as ISO27K, ISO22301, COBIT, NIST and GDPR is a merit.
- We take into consideration previous experience within risk management, processes and controls, as well audit.


WOW in everything we do

Qliro offers a dynamic and fast-paced Fintech environment with teams of driven and flexible individuals. We thrive on challenges, personal growth and you will be able to excel within the company. We have been implementing agile ways of working from the get-go, evolving our ways of working over-time to constantly improve. Our software engineering teams are moving towards taking on a full end-to-end responsibility for their assets, and with the changes we are doing to create a fully programmable infrastructure as well as enabling use of Cloud, we are ready to move towards full-circle end-to-end ownership. This reduces dependencies between teams and helps us to move fast without breaking things.

We have a learning and development focused environment with an emphasis on knowledge sharing and training. We work hard to create a workplace that is diverse and inclusive with employees from over 30 countries from all over the world.

We believe in the power of collaboration and empowering each other and we strive to create a wow experience in our way of working. We see our future way of working as a hybrid way of working with a mix of working in the office and working remote. We believe in the power of meeting each other in real life and want our office to be a space for collaboration and creativity, where we can meet in person and bring out the best in one another. Together, we will ensure we continue to create WOW in everything we do.