Nordnet

Information Security Officer

In short

Nordnet, a digital bank, is hiring an Information Security Officer for its central security team to shape security policy, manage third-party risk, build security culture and awareness, and lead security projects, reporting to the Head of Security. The role requires 5+ years in information security, solid knowledge of ISO 27001 and NIST CSF 2.0, practical experience with DORA (and ideally CRA), fluent English, and strong communication skills across technical and leadership audiences. It's a full-time, hybrid position based in Stockholm with optional on-call rotation.

About the role
30 years ago, Nordnet redefined the financial world as the first digital bank in Europe. Now we're doing it again, building the next generation of cloud-based banking. That takes the right people, the right team, and the right technology.
Want to help shape security at Nordnet?
We are Nordnet's security team
We are Nordnet's central security function covering information security, IT security, secure development, incident response, and physical security. We believe security is solved together, not in silos, and that every team member brings their own expertise and takes ownership of the team's shared results. We also believe that working as a tight team allows us to have more fun at work!
As Information Security Officer, you'll have a broad mandate within information security at Nordnet. This includes:
•Shape and develop our security posture. Establish and enforce organizational security policies based on strategy, priorities, and legal/regulatory requirements like DORA and CRA.
•Manage third-party risk management end-to-end. Conduct security assessments and build clear security requirements into vendor contracts.
•Build security culture and awareness. Create impactful, engaging awareness programs and communications that make security second nature across the organization.
•Lead security projects. Drive key security initiatives and collaborate cross-functionally to push our goals forward.
You'll report to the Head of Security. The Security Team includes operational Team Lead roles, and for the right person this could be a natural next step down the line, though it's not a requirement to apply now. If you're up for it, there's also an option to join our on-call rotation, covering a couple of weeks during the year as first responder for security incidents.
About you
You bring solid experience in information security, frameworks like ISO 27001 and NIST CSF 2.0 are second nature, and ideally you've also worked with DORA in practice, and potentially have started to work with CRA. Five or more years in the field is our starting point; a background in financial services and a technical foundation are a strong plus, since we're a digital bank.
You're as comfortable creating engaging security communications as you are digging into the fine print of a regulation. You can independently structure and drive your own area of responsibility, and you have the ability to talk security risk with both the leadership team and the engineers, pitched right for each audience.
You take a pragmatic approach to risk: the goal is an adequate level of security relative to the threat, not eliminating every conceivable risk. You know that good security work is built on collaboration and compromise, not solo effort.
You're fluent in written and spoken English. Swedish isn't required, but it's a plus.
About us
We're building a world-class customer experience with the ambition to become the first choice for savings and investments across the Nordics. You'll join a tight-knit, driven team with a fast pace and real room to make an impact, part of an organization of 900+ employees across Stockholm, Oslo, Helsinki and Copenhagen.
We apply individual salary settings. The role is full time employment with a hybrid workplace based in Stockholm.
Learn more about us at www.nordnetab.com
Questions & applications
Questions about the role? Contact Talent Acquisition Partner Lovisa Malmberg, [email protected], +46 73-699 05 07.
We only accept applications through our recruitment system, applications by email will not be considered. Nordnet conducts credit and background checks as well as a drug test on the final candidate.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot