Information Security Specialist

Would you like to work in an international environment where you’ll makea difference every day? At Permobil, we’re looking for game-changers to join usas we innovate for individuals and develop the world’s most advanced assistive solutions.

At Permobil, the people who use our products come first. Our purpose is tocreate advanced assistive solutions that make the lives of adults and children living with disabilities more enriching. Our people are passionate about pushing the boundaries of technology to deliver innovations that improve lives.

We are a sustainable and responsible business committed to continuous improvement, and our customers can trust us to provide market-leading solutions driven by insights-based clinical data.

Permobilis seeking an experienced Information Security Specialist to lead and strengthen our data protection, information governance, and compliance capabilities across the organization. Based in Lebanon, Tennessee (Nashville area), or in Stockholm / Sundsvall (Sweden), this hands-on role is responsible for ensuring that information is classified, protected, retained, and governed appropriately throughout its lifecycle. Leveraging Microsoft Purview as the primary platform, you will translate security, privacy, and compliance requirements into practical controls that support business operations whileprotecting sensitive information.

• Own and maintain Permobil’s data classification framework, handling rules, and information protection strategy across Microsoft 365, endpoints, and on-premises environments,
• Manage Microsoft Purview capabilities, including Information Protection, Sensitivity Labels, Auto-Labeling, DLP, DSPM, Insider Risk Management, Records Management, and Compliance Manager,
• Monitor and investigate data-related security incidents and compliance alerts, supporting resolution and continuous improvement,
• Establish data ownership, governance, retention, and deletion practices aligned with legal, privacy, quality, and business requirements,
• Partner with Privacy and Legal on DPIAs, records of processing activities, data subject requests, cross-border data transfers, and privacy-by-design initiatives,
• Maintain information security policies and standards, conduct risk assessments, map controls to ISO/IEC 27001 and NIST CSF 2.0, and support audits, customer assessments, and supplier reviews,
• Deliver security and privacy awareness programs, including training, phishing simulations, and AI literacy initiatives,
• Develop and report KPIs related to labeling coverage, DLP incidents, audit findings, and information governance effectiveness.

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent experience,
• 5+ years of experience in information security or IT governance, including 3+ years of hands‑on experience with Microsoft Purview or a similar platform,
• Proven experience implementing data classification, sensitivity labeling, and DLP programs in a global organization,
• Good knowledge of ISO/IEC 27001, ISO/IEC 27701, NIST CSF 2.0, NIS2, GDPR, U.S. privacy regulations (including HIPAA where applicable), and governance frameworks such as COBIT,
• Microsoft SC-401 certification is highly desirable; CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementer/Auditor, or IAPP certifications (CIPT/CIPP) are advantageous,
• Experience with AI data security, Microsoft 365 Copilot governance, the EU AI Act, and regulated industries such as medical devices, life sciences, or healthcare is a plus.

Youare a proactive and pragmatic information security professional who combinesdeep technical expertise with strong business understanding. You are passionate about protecting information…