Senior IT Security Officer

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match. Role Purpose The Senior IT Security & Risk Officer leads and supports IT security risk management activities across Volvo Group, helping stakeholders identify, assess, manage, and reduce security risks in a structured and business-aligned way. The role acts as a trusted advisor to senior stakeholders, Stable Teams, technology teams, and security governance forums. It combines strong IT security risk expertise with stakeholder management, governance support, and the ability to guide others. Mission Drive effective IT security risk management by translating security requirements, risk findings, and governance expectations into clear decisions, practical actions, and measurable improvements. Support teams in understanding their risk exposure, making informed security decisions, and improving their security maturity over time. Key Accountabilities Stakeholder Management & Advisory Act as a trusted advisor to business, technology, product, and security stakeholders. Build strong relationships with senior stakeholders and influence risk-based decision-making. Translate complex security and risk topics into clear business language. Support teams in applying security policies, standards, and control requirements in context. Promote a pragmatic, service-minded, and risk-based approach to security. Governance, Compliance & Reporting Support the operationalization of IT security governance frameworks, policies, and standards. Contribute to audit, compliance, and control assessment activities. Prepare clear risk reporting, decision material, and leadership updates. Identify recurring risk themes, control gaps, and opportunities for improvement. Support continuous improvement of risk management processes, templates, and governance materials. Leadership & People Management Provide guidance, coaching, and support to junior security colleagues. Contribute to workload planning, prioritization, and quality review of risk activities. Support knowledge sharing and development of common ways of working. Potentially act as a people manager, depending on organizational needs. Help build a collaborative, high-performing, and service-oriented security risk capability. Expected Outcomes Key IT security risks are clearly identified, documented, owned, and followed up. Stakeholders receive practical and business-aligned security risk advice. Risk decisions are better informed, consistent, and aligned with governance expectations. Security reporting provides useful insight into risk posture, trends, and remediation progress. Security risk management practices become more consistent, scalable, and effective. Junior colleagues receive appropriate guidance, coaching, and support. Required Competencies Strong understanding of IT security, risk management, governance, and security controls. Ability to lead risk assessments and translate findings into practical actions. Strong stakeholder management and influencing skills. Clear communication skills with both technical and non-technical audiences. Good understanding of security frameworks, policies, standards, and compliance expectations. Strong analytical mindset and ability to prioritize based on risk and business impact. Ability to work independently and guide others. Service-minded, pragmatic, and collaborative approach. Experience 15+ years of experience in IT security, cybersecurity risk management, IT governance, audit, compliance, or related areas. Experience working with senior stakeholders, technology teams, product teams, or governance forums. Experience leading risk assessments, remediation follow-up, reporting, or control improvement activities. Experience coaching junior colleagues or contributing to people leadership is beneficial. People management experience is a plus, but not mandatory. Education Formal education in IT, cybersecurity, information systems, risk management, audit, or a related field is beneficial. Equivalent professional experience, relevant certifications, or demonstrated practical knowledge may be considered in place of formal education. Ready for the next move Are you excited to bring your skills and disruptive ideas to the table We cant wait to hear from you. Apply today! At Volvo Group, we believe in the value of in-person collaboration and connection. Our general principle is that employees work from the office. We look forward to receiving your application! The final date to apply is July 24. Volvo Group never requests any form of payment or fees from candidates at any stage of the recruitment process. Any such demand is a scam. To view the authentic job description and apply securely, please