Product Security and Compliance Lead

About this opportunity

Ericsson created the technology that first connected people and will soon connect everything. But our role as a connector and orchestrator also means more. From being a key contributor to the open standards that enable our industry to providing technology innovation for positive change.

Connectivity impacts our lives every day – from being able to call 112 when emergency strikes, to using our smartphone to navigate across town.

Ericsson Business Area Cloud Software and Services (BCSS) Product Security Center is at the heart of this journey. We are now recruiting a Product Security and Compliance Lead to join our team here in Stockholm.

You will be working in the intersection of technology, policy and security, driving improvement initiatives across Ericsson.

This role is designed for an individual who brings strong analytical and technical skills, drives to create impact across organizational boundaries and who can communicate complex topics with clarity to different audiences.

What you will do

• Identify fragmentation, gaps, or misalignment and drive technical alignment across the organization.
• Analyze and drive security and policy initiatives across BCSS R&D
• Lead and facilitate selected discussions, workshops, and follow-through activities to build and sustain shared direction.
• Represent Product Security Center in designated forums where credibility, informed perspective, and reliable follow-through are required.
• Drive cross-functional initiatives that strengthen regulatory readiness, improve ways of working, and bring structure, transparency, and risk awareness to complex security and compliance efforts.

What you will bring

• 5+ years of experience in security engineering, product development, governance, risk, compliance or security consulting, preferably within telecom, banking, medtech, defense or another highly regulated industry.
• Collaborative, building trust and relationships across the organization and bring people with different perspectives and priorities together towards a common goal. A team player.
• A driving force who takes ownership and drive cross-functional initiatives with agency such as process enhancements, reporting, analyses
• Pragmatic, solution oriented and can navigate unclarity and ambiguity
• Structured and can create order in complex workflows, handle several parallel activities and drive systematic change
• Communicating complex information to different audiences with ease, in writing and in person, from developers to leadership teams or auditors
• Working knowledge of relevant regulatory and compliance frameworks such as EU Cyber Resilience Act, NIST SSDF, GSMA NESAS, Common Criteria and experience supporting audits against them.

• Degree in engineering/ computer science/ political science/ security/ law/ any other relevant field. Certifications such as CISSP, CISM, CISA or others are an advantage but not required.
• Strong project and stakeholder management skills, with the ability to translate regulatory and compliance requirements into clear actions and drive sustainable delivery across complex organizational environments.