Chief Information Security Officer (CISO)

About Enity Bank Group At Enity, we believe in people’s potential. We’re challenging the Nordic mortgage market by making banking more inclusive, sustainable, and human. As a listed company with the brands Bluestep Bank, Bank2 and 60plusbanken, we offer mortgages to those often excluded by traditional banks – for example, due to self-employment, employment type, age, or credit history. We operate across Sweden, Norway and Finland, and we’re on a mission to shape the future of banking – together. About the role We are now looking for a Chief Information Security Officer (CISO) who wants to lead and further develop our work within information security and cyber risk in a Nordic bank where security, digitalisation and regulatory requirements are high on the agenda. You will report to our Chief Data & Technology Officer. This is a broad and business-critical role in a small bank. You will set direction, create structure and help the organisation make well-informed security decisions in a fast-moving environment. Being small means that you will be hands-on, prioritise sharply and focus on what genuinely reduces risk, rather than building a security programme designed for a much larger bank. You will work close to both technology and the business, translating complex risks into practical actions and clear decision material. As CISO, you will develop and drive the bank’s security strategy, strengthen our digital operational resilience and provide management and the Board with a clear view of the bank’s information and cyber risks. You will also play an important role in building awareness, confidence and good judgement across the organisation. In practice, this means that you will: - Own and further develop our information security framework, sized to fit a small bank. - Drive work related to DORA and other regulatory requirements, applying proportionality with sound judgement. - Ensure that information and cyber risks are managed in a structured and pragmatic way. - Stay close to the threat landscape, security incidents and vulnerabilities, and turn insights into relevant actions for the bank. - Contribute to the governance of critical outsourcing and ICT suppliers, and make smart use of external partners and managed services. - Report to the CDTO, management, risk forums and the Board, and support the organisation through training, guidance and clear communication. About you We believe you have solid experience within information security, cyber security or IT risk, from banking, financial services or another regulated environment. - You recognise that we are a small bank and tailor your approach accordingly: you work hands-on, apply proportionality with judgement, prioritise on risk, and get results through partners, shared tools and strong relationships rather than a large team. - You understand governance, risk management and regulatory expectations. - You know how to make security relevant for both technical specialists and senior decision-makers. - You are curious, structured and confident enough to ask the right questions and challenge when needed. - You are pragmatic without compromising on integrity. - You enjoy operating in the space between regulation, technology and business reality. English is a must, Swedish is a strong plus. A Swedish work permit is a prerequisite and to be eligible you must also pass our background checks. We offer We offer a competitive compensation package complemented by a generous range of benefits, and flexibility to support your work-life balance. For this position, we offer a monthly salary starting at SEK 90.000. However, we recognize that experience and unique expertise matter, so there is flexibility to offer a higher salary for the right candidate. Sound interesting? We would be happy to see your application no later than November 8:th.. If you would like more information or have questions about the role, please contact HR@enity.com. We look forward to hear from you! Embracing inclusivity, we value each candidate based on their skills and experience. There is no need to include a photo in your application.