Cybersecurity Manager

About the role

PolyPeptide, a CDMO for peptide- and oligonucleotide-based active pharmaceutical ingredients, is looking for a Cybersecurity Manager in Malmö. The role combines cybersecurity expertise with operational coordination, turning the Group's information security strategy into clear priorities, effective controls and measurable improvements. You will report to the Global Head of Information and Cybersecurity, and the position is not a formal people-management role: leadership focuses on coordinating assigned cybersecurity resources and external partners, setting priorities and following through on delivery. You will work across sites and time zones, with travel expected for about 20% of your time.

Key responsibilities

• Coordinate security operations: lead and improve day-to-day monitoring, threat detection, vulnerability management and remediation follow-up, and coordinate security testing and technical reviews with internal teams and service providers.
• Lead or coordinate incident response, ensuring timely analysis, containment, eradication, recovery and documentation, and escalating incidents affecting business continuity, product quality, data integrity or regulatory obligations.
• Strengthen risk management and compliance: support the Information Security Management System and controls aligned with ISO/IEC 27001:2022, and contribute to risk assessments, supplier assessments and security reviews, including cloud services and GxP-relevant environments.
• Support audits and operational follow-up, providing evidence and documentation, reporting on cybersecurity posture and tracking actions.
• Build awareness and capabilities: coordinate or support training and communication, maintain procedures and response playbooks, and turn threat intelligence and industry developments into improvements.

Required profile

• Demonstrated cybersecurity and information security competence, gained through education, training and/or professional experience.
• Several years of experience in security operations, incident response, vulnerability management, risk management or information security governance.
• Proven ability to lead and coordinate cybersecurity work in a structured, pragmatic way, working with stakeholders and external providers in a global, multi-site organisation.
• Experience in a regulated environment, ideally pharmaceuticals, life sciences or another quality-controlled industry, is meritorious.
• A bachelor's degree in information security, computer science, information systems, engineering or a related field is an advantage but not required; equivalent practical experience may be considered.

Required skills

• Technical implementation of cybersecurity services and configurations in Microsoft Azure and M365.
• Good understanding of ISO/IEC 27001, cybersecurity frameworks, security controls and risk-based ways of working.
• Understanding of identity and access management, endpoint and cloud security, logging and monitoring, supplier risk and secure system lifecycle practices.
• Certifications such as CISSP, CISM, CISA, CRISC or ISO 27001 Lead Implementer/Lead Auditor are an advantage.

What we offer

• Favorable reduced working hours and time off on bridging days.
• A strong focus on health and wellness activities.