Chief Information Security Officer

Job Description

Do you want to lead information security in one of Sweden’s most important telecom companies? Tele2 is now looking for a Chief Information Security Officer who wants to take clear ownership of developing our security capabilities, strengthening our resilience, and ensuring that information security is a natural part of the business.

As Chief Information Security Officer at Tele2, you will play a central role in driving, coordinating, and developing information security across Tele2, including Sweden and the Baltic countries, at a strategic and operational level. The role includes people management responsibility for four employees within the CISO Office and reports to the Director Group Security. You will work closely with senior management, the technology organization, Legal, Governance, Risk, internal control functions, and wider business.

The role also involves very close and daily collaboration with Tele2’s Cyber Security department, ensuring strong alignment between information security governance, operational cyber capabilities, threat management, and security priorities. You will be an important advisor on matters relating to security governance, risk management, regulatory requirements, and future security challenges.

About the job

As Chief Information Security Officer, you will be responsible for leading and further developing Tele2’s information security work, including governance, frameworks, risk management, compliance, and security culture. You will ensure that security activities are business-oriented, risk-based, and aligned with both current requirements and future threats.

Your responsibilities will include:

• Leading and developing Tele2’s information security strategy and security governance.
  Managing and developing a team of four employees within the CISO Office.
• Ensuring close, daily collaboration with the Cyber Security department to align governance, risk, compliance, operational security priorities, and cyber resilience.
• Ensuring compliance with relevant laws, regulations, standards, and internal requirements.
• Driving a risk-based approach to information security, cyber risks, and critical assets.
• Acting as an advisor to senior management and the business on security-related matters.
• Developing processes, policies, controls, and follow-up models within information security.
• Collaborating with internal and external stakeholders, including supervisory authorities, auditors, suppliers, and group functions.
• Strengthening the security culture through clear communication, training, and stakeholder engagement.
• Contributing to Tele2 staying at the forefront of modern information security, including the use of AI to support analysis, risk management, incident handling, and more efficient security work.

Who are you?

We are looking for someone with solid experience in information security, cyber security, risk management, or security governance in a complex organization. You can combine a strategic overview with practical execution and thrive in a role where you lead, influence, and build trust.

We would like you to have:

• Several years of experience in information security, cyber security, IT risk, governance, or compliance.
• Experience working with security frameworks and standards such as ISO 27001, 42001, NIST CSF, PCI DSS and ENS.
• Experience leading security work in a larger, regulated, or critical infrastructure organisation.
• Excellent written and verbal communication skills in Swedish and English.
• A good understanding of regulatory requirements, risk management, internal control, and security governance.
• The ability to translate complex security matters into clear decisions, priorities, and business-relevant communication.
• Experience reporting to senior management, boards, audit committees, or similar forums.
• Preferably previous leadership experience, preferably including people management responsibility.
• A strong interest in how AI can be used responsibly and effectively within information security, for example in threat analysis, vulnerability management, security monitoring, automation, policy work, and risk assessment.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor, or equivalent are meritorious but not required.

As a person we believe you are confident, clear, and trustworthy. You have high integrity, strong analytical skills, and the ability to navigate complex environments with many stakeholders. You are both strategic and pragmatic, with the ability to create structure, drive change, and bring the organization with you.

We believe you are someone who communicates clearly and adapts your message to different audiences. You are able to build strong relationships and create trust across the organization. As a person you are solution-oriented, business-minded, and used to prioritizing based on risk. We also believe you are curious about new technology and wants to develop security work through modern tools, data, and AI.