Information Security Analyst

About Veoneer Safety Systems:

Veoneer exists to Protect Everyone in Every Crash. We design, manufacture, and sell the world's best automotive safety electronics.

Veoneer is a world leader, and almost every 4th car produced today has Veoneer's automotive safety electronics. Veoneer has delivered more than 1.1 billion electronic control units and crash sensors to car manufacturers globally.

The company is building on a heritage of 70 years of automotive safety development. Veoneer is owned by AIP, is headquartered in the U.S., and has approximately 2,550 employees in 11 countries.

What you'll do?

As an Information Security Analyst at Veoneer, you will be instrumental in building and executing a global information security management system. You will ensure compliance with internal and external security requirements and collaborate with various departments to enhance our security posture. Your role will involve proactive identification and mitigation of security risks, as well as facilitating audits and training.

Key Responsabilities

Strategic Context and Challenges:

• Build and execute a global information security management system in alignment with enterprise vision and strategy.
• Monitor and ensure the organization’s compliance with internal and external Information Security requirements.
• Ensure compliance with regulatory and corporate standards and procedures.

Core Responsibilities and Activities:

• Support control owners in preparing for internal and external audits of information systems, processes, and services.
• Facilitate communication between external auditors and relevant Veoneer personnel.
• Monitor and identify compliance and information security control gaps, driving remediation activities with stakeholders.
• Provide process and compliance recommendations to internal stakeholders.
• Assist with monitoring and governance of the information security policies and standards.

Other Governance, Risk, and Compliance (GRC) Responsibilities:

• Collaborate with stakeholders to support the controls implementation process.
• Serve as an information security liaison to IT business areas to ensure information security processes are followed.
• Collaborate across IT to ensure the execution of IT-centric security measures.
• Assist with company-wide information security awareness training.

What you'll bring

• Knowledge of Information Security Management Frameworks: Familiarity with frameworks such as ISO/IEC 27001 and 31000.
• ITIL Knowledge: Understanding of ITIL practices and principles.
• TISAX Program Knowledge: Awareness of the TISAX Program and its requirements.
• Bachelor’s Degree: A degree in Computer Science or an equivalent field is required.
• Professional Experience: At least two years of progressive experience in information security, IT audits, or related work.