Supply chain IT-security manager

Does IT-security matter to you? Are you ready to join our digitalization journey where the supplier cybersecurity stature is essential? If so, let’s talk.


Within the Cybersecurity organization at Volvo Group IT, you will assist in meet the global challenges of keeping one of the largest companies in the world secure. We believe that you are an enthusiastic, innovative team member with the right attitude.


About the team
The Cybersecurity function shall support the organization in ensuring that information assets in IT services and business applications are protected from being attacked e.g., stolen, compromised, or made unavailable with a clear central role in putting requirements and governing IT security. The mission for the team is to be a part of the protection of digital information where we also need to communicate enterprise wide. We believe that the key to our success is daring to challenge our current ways of working and having fun while doing it.


Position Summary
The strategic digital journey will include more bought services and applications, where security needs to be emphasized and prioritized. This position will make sure that Volvo Group has implemented a robust purchasing process that puts requirements on our suppliers and follow up from a governance perspective. Security assessments of cloud suppliers will also be included.

Essential Job Duties
Structuring our processes regarding security in supply chain
Work closely with purchasing department
Communication with Volvo group internal stakeholder’s
Supplier evaluation and compliance using external partners
Creating, manage and govern the IT-security requirements towards the supplier
Will be subject matter expert (SME) for supply chain IT-security directive
Governance of the purchasing process from a security perspective

Required Technical and Professional Expertise
Professional experience working with supply chain security, purchasing and contract management
Experience from working with information security frameworks such as cloud security alliance (CSA), ISA 62443, ISO270001, Standard of good practice etc.
Technical understanding to be able to understand implemented security solutions at suppliers
Good verbal and written communication skills
Extra advantage if you have a personal IT security certification, such as CISM, CISA, CRISC, CISSP or equivalent.