Orange Cyberdefense
Business Security & Data Privacy Officer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Business Security & Data Privacy Officer
We are looking for a Business Security & Data Privacy Officer to join the Global Security Department within Orange Cyberdefense. This is a great opportunity to be part of an important internal function.
The right candidate combines a broad knowledge of data protection and business security with a service-oriented approach. You enjoy having contact with many parts of our business, sharing your knowledge and contributing to the development of our department.
In this role, you will play a key role in the compliance of the offers offered to our clients and in the compliance of our suppliers with National and European regulations, ISO certifications and SOC2 assurance. In this role, you collaborate with various stakeholders, effectively communicating and driving initiatives forward.
Key Responsibilities
- Advise and support the Business Unit – Cyber with Business when it comes to Data Privacy and Security related topics.
- Define and maintain the internal Security and Privacy framework.
- Act as a point of contact for data subject requests.
- Analyse, investigate, audit, and monitor that processing activities comply with the legal framework or the proper application of procedures, methods, or instructions relating to the protection of personal data.
- Provide advice, upon request, regarding Data Protection Impact Assessments (DPIAs) or Privacy Impact Assessments (PIAs) and verify their implementation.
- Promote a "Data Protection and Privacy" culture.
- Define and maintain, with the Orange Cyberdefense operational teams, the Generic Security Assurance Plans and certification for our cybersecurity products and services.
- Maintain the procedures for managing client audits on information security and personal data protection commitments.
- Support the execution of internal and external audits.
- Support the legal, sales, and pre-sales teams in responding to our clients' contractual requirements regarding information security and personal data protection.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
The Ideal Candidate
- Strong execution capability and the ability to move from framework to implementation.
- Experience in defining, formalizing and improving procedures.
- Strong communication and stakeholder management skills.
- A structured, pragmatic and solution-oriented approach.
- A strong sense of ownership and follow-through.
We are looking for a candidate who combines solid knowledge with a practical, delivery-focused mindset.
Required Qualifications
- Bachelor´s degree or equivalent experience acquired in other ways within Information Security, Risk Management, Privacy, Compliance or a related field.
- At least 5+ years of relevant experience within the field.
- Strong knowledge of key frameworks and regulations including GDPR, DORA, NIS2, ISO 27001 and SOC 2.
- Experience with GRC tools, dashboards, compliance reporting and control monitoring.
- Experience driving implementation and adoption of processes and ways of working across cross-functional requirements.
- Strong written and verbal communication skills.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Preferred Qualifications
- ISO 27001 Lead Auditor/Implementer
- ISO 27035 Risk Manager/Lead Risk Manager
- ISO 27701 Lead Implementer/Auditor
- Relevant certifications i.e. CISSP, CISM, CISA, CRISC
- Strong business understanding and ability to apply Privacy and Security principles in a client-facing environment.
- Experience of similar roles.
- Ability to apply a risk-based and pragmatic approach to prioritization and implementation.
We Are Orange Cyberdefense
Orange Cyberdefense is Sweden's leading cybersecurity company. Our vision is simple yet powerful: We build a safer digital society.
We offer our customers services across a wide range of areas, from in-depth technical solutions to broader services such as security governance and management, risk modelling, and risk analysis. We have 400 colleagues in Sweden and 3,500 colleagues globally.
At Orange Cyberdefense, we are all different but share the same passion for cybersecurity – and that is our greatest strength. We are proud of our differences, experiences, and backgrounds, and we firmly believe that we need to include everyone in order to provide solutions that work for everyone. That is why we ensure that all applications are handled equally.
Other
We recruit continuously and will fill the position as soon as we find the right person.
Orange Cyberdefense – Together, we build a safer digital society.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London