Head of Information Security

Paligo is hiring a Head of Information Security to own, lead, and continuously improve our information security work. Enterprise customers in 38 countries trust Paligo with their most critical content, this role exists to keep that trust earned, from our ISO 27001-certified ISMS to the security foundations as we evolve to become the AI Content Infrastructure for businesses.

This is a hybrid position based out of our Stockholm office. Candidates must currently reside in Sweden and hold the legal right to work there. We are unable to sponsor work visas or offer relocation for this role.

About Paligo

Paligo is an industry-leading SaaS company in the Component Content Management Systems (CCMS) space. Global teams at Amazon, Allianz, Mitsubishi, and the European Commission use our platform to create, manage, publish, and translate technical content.

After having built a successful documentation authoring tool, Paligo is transforming into a foundational AI Content Infrastructure, ensuring enterprise AI is safe, compliant, and accurate by grounding it in the rich context distributed across diverse business sources.

About the role

You'll be Paligo's most senior security person, owning our Information Security Management System (ISMS) end-to-end in line with ISO/IEC 27001:2022 and where the business is heading. That means the full picture: risk management, compliance (including GDPR), security strategy and architecture, incident response, business continuity, and the security culture across the company.

In this hands-on role at a company of under 100 people, you will set direction and execute: running audits, managing risks, handling incidents, and partnering with engineering to ensure security and compliance. You hold full authority over ISMS operations, incident response, and policy enforcement, reporting security performance directly to the CTO.

What you'll do

• Direct the ISO 27001:2022 ISMS lifecycle and continuous improvement programs.

• Own the information security risk management framework across the Paligo CCMS.

• Architect and execute a comprehensive security strategy for AI Grounding Infrastructure, ensuring robust protection across all data pipelines.

• Secure external AI offerings, including MCP and APIs for autonomous agents, mitigating risks associated with data exposure and unauthorized access.

• Partner closely with Legal and product teams to define and implement stringent data sharing and privacy policies, ensuring compliance and minimizing organizational risk.

• Manage organizational compliance with GDPR, regulatory, and contractual requirements.

• Establish and test incident response and business continuity plans.

• Report on ISMS performance and security risks to executive leadership.

What we're looking for

Required

• 5–8+ years of progressive experience in information security and risk management, preferably at a SaaS or technology company.

• A track record of establishing, operating, and maintaining an ISMS including hands-on experience with the ISO 27001 certification lifecycle, from implementation through continuous auditing.

• Experience with cloud security architecture and best practices (AWS, Azure, GCP).

• Proven experience developing and implementing security strategies, architecture, and roadmaps.

• A Bachelor's or Master's degree in Computer Science, Information Technology, Information Security, or a related field.
  

• Professional fluency in English.
  

Nice to have

• Experience with compliance frameworks such as SOC 2, NIST CSF, PCI-DSS, CCPA, or HIPAA.

• Prior exposure to Component Content Management Systems or similar content- and data-heavy platforms.

• Experience with securing AI integrations via MCP and APIs.

• Certifications such as CRISC or CCSP.
  
  

What we offer

• Full ownership of security at a profitable, growing company with the mandate and executive access to match.

• Room to grow into the role: this is the top security seat at Paligo, and it grows as we do.

• A front-row seat as we build AI grounding infrastructure for enterprises, where security is a core part of the product story.

• Competitive benefits, flexible working hours, and a hybrid setup based in Stockholm.

• A culture that takes work seriously and the rest of life seriously too.
  
  

Ready to talk?

If owning the security posture of a platform that enterprises worldwide depend on sounds like the job you want, we'd like to hear from you.

(The final step of our recruitment process is a mandatory background check, including a financial and criminal check. Any offer of employment is contingent on its successful completion.)