Stillfront Group is on a mission to protect its global digital ecosystem and ensure the security of our portfolio of gaming experiences. We are seeking an experienced and hands-on Chief Information Security Officer (CISO) to lead our cybersecurity efforts. The CISO will play a pivotal role in shaping the future of our cybersecurity strategy, driving risk management, and ensuring the highest level of information security across all studios and operations. This position reports directly to the CIO and will be based in our Stockholm headquarters, with the flexibility to collaborate globally with our diverse and dynamic teams.
YOUR MISSION
- Developing and executing a comprehensive information security strategy that aligns with Stillfront's business objectives and risk appetite
- Overseeing the implementation of security measures, ensuring protection across our infrastructure, platforms, and game development studios
- Leading a global security team in the identification, assessment, and mitigation of cybersecurity risks, including security architecture, governance, and incident response
- Monitoring and ensuring compliance with cybersecurity regulations and standards across our global operations
- Collaborating with internal stakeholders, including IT, Legal, and Product Development teams, to integrate security into every phase of product, game and service development
- Managing relationships with external security vendors, consultants, and partners to ensure the most up-to-date security solutions are in place
- Providing executive leadership with regular reporting on the status of cybersecurity threats, vulnerabilities, and remediation efforts
- Leading incident response efforts, including investigation, reporting, and remediation of security incidents, breaches, and threats
- Championing a culture of security awareness across the organization through training and best practices
YOUR BACKSTORY
- A minimum of 10 years of experience in information security, risk management, or a related field, with at least 5 years in a senior leadership role
- Proven experience in developing and implementing security strategies, frameworks, and policies for global organizations
- A deep understanding of cybersecurity threats, vulnerabilities, and countermeasures, with expertise in incident response and crisis management
- Strong knowledge of information security standards such as ISO 27001, NIST, and GDPR compliance
- Hands-on experience with security technologies, including WAF, intrusion detection systems, endpoint protection, encryption, and cloud security
- Experience working with regulatory bodies and compliance requirements in a global context
- Excellent leadership, communication, and interpersonal skills, with the ability to influence and collaborate with senior stakeholders and cross-functional teams
- A proactive, strategic thinker, with the ability to operate in a fast-paced, ever-evolving environment. Relevant certifications, such as CISSP, CISM, or CISA, are desirable
- Fluent in English, with Swedish as a plus