Head of Security (533A21C)

Referment is working with a growing financial-technology SaaS business whose data and software help investor-relations and finance professionals make informed decisions. The company is hiring a Head of Security to take overall responsibility for information security and develop the structure needed to support its Swedish and international operations.

This is a broad, hands-on role spanning governance, technical security and customer-facing assurance. You will build on an existing information security management system, lead the path towards SOC 2 certification and work directly with software engineers on application and infrastructure security. You will also represent security in B2B customer discussions. The position follows a hybrid model from the company’s Stockholm office.

The Role

Own and continue developing the information security management system and the organisation’s ISO 27001 work.Lead the implementation and certification programme for SOC 2.Lead incident response and develop effective processes and tools for logging, monitoring and incident management, including SIEM capabilities.Set security requirements and organise technical security work directly with development teams.Advise colleagues on application and infrastructure security.Act as the technical security expert in B2B sales processes and establish a Trust Center for customer assessments.

What We're Looking For

Several years of direct security experience, potentially gained through DevSecOps, penetration testing or security-focused software development.A relevant engineering or technical education, or an equivalent background.Fluency in both Swedish and English, spoken and written.The ability to move comfortably between governance, hands-on technical work, software teams and external customer conversations.

Relevant Desirable Experience

Practical work with ISO 27001 or SOC 2, modern cloud software development, CI/CD and SIEM implementation would be valuable. Experience of penetration testing, vulnerability analysis, the OWASP Top 10 or managing security assessments in a B2B SaaS environment would also be useful.

This could suit a Security Lead, Information Security Manager, senior DevSecOps specialist or security-focused engineering leader who is ready to take broad ownership of a security function while remaining close to technical delivery.

#Referment