The opportunity

We are looking for an Information Security Officer to support Polestar’s vehicle programs with Off Board Vehicle System’s security. The IT landscape complexity is growing and in Information Security we need to keep the company and its vehicles safe from a diverse set of threats.

This position is located at our Gothenburg, Sweden offices. We believe in a hybrid model when it comes to remote and onsite work, knowing that both in-person collaboration and individual time to focus are needed. What matters most is that people get the time, and support, to do what needs to be done. And to enjoy doing it, of course.

The responsibilities

Information Security Officers at Polestar design and improve Information Security Capabilities, handle incident management, vulnerability management, and security monitoring. They ensure the integration of security processes across departments, support risk tracking, and collaborate with other teams. They report to the CISO and are accountable for integrated status and future development tracking of the Information Security Capabilities.

See below for a more thorough breakdown of the various tasks and areas you'll be responsible for:

• Oversee and govern InfoSec Capabilities or Services per the InfoSec Strategy.
• Define and set standards and practices for responsible areas.
• Establish and align Key Performance Indicators (KPI) with organizational goals.
• Support Risk Management, Risk Analysis, and stakeholder consultations on Risk Treatment.
• Formulate tactical goals and translate them into operational plans.
• Contribute to strategic planning and governance decisions.
• Ensure alignment and handovers within InfoSec Teams.
• Manage stakeholders and promote InfoSec Culture.
• Deliver tailored Awareness and Training programs.
• Coordinate capabilities, ecosystems, and market-specific deployments.
• Collect, aggregate, and monitor InfoSec Risk Data.
• Collaborate with R&D, Product Security and Digital teams for the implementation of security controls for off board vehicle systems. 

The ideal candidate

We seek a patient, open individual who excels at informing, motivating, and training others. This high-energy person embraces trust, transparency, and innovation, constantly seeking improvements. With strong communication skills, they align the organization on technical decisions, balance quality with pragmatism, and connect thinkers for efficient work. They effectively translate between digital business and Information Security stakeholders.

It is essential that you have experience in one or more of the following areas:

1. Experience in rolling out SDLC processes and expertise in Cloud, Mobile, or Embedded/Car systems, with skills in threat modelling, secure coding, and aligning development practices with security requirements and compliance.
2. Possess expertise in PKI and symmetric systems, key management, HSMs, and cryptographic usability, with the ability to train others on selecting appropriate crypto types and understanding the implications of symmetric vs. asymmetric keys in processes like enrolment.
3. Possess experience in Automotive Product Security, CSMS, asset management, and risk management and threat modelling, with a strong understanding of the current threat landscape, effective protection methods, and the ability to incorporate legal requirements into solutions.

In addition, you'll need the following qualifications/experience:

• University degree in relevant subject area in relation to Information Security
• More than four years of experience working in Product Security or digital organizations and Information Security
• History of adapting industry standard enterprise-wide security technologies and concepts to technology and business defined scopes
• Knowledge of relevant industry standards (e.g., NIST 800-53, ISO 27001, ISO 27018, ISO 21434)
• Knowledge of automotive security regulations (e.g. UNECE R155)

Polestar is an international company, with various backgrounds represented. English, therefore, is the language of written and spoken communication. And though we have a global presence, we maintain the growth-mindset. Change happens often at Polestar. But so does progress. Expect an accelerating, exciting environment.

The process

If the above matches your ambitions, be sure to apply. Our selection process is ongoing, and the job advert will remain open until it’s filled.

The Polestar journey is an electric one.