Cyber Risk Management Specialist

Cyber Risk Management Specialist

Position type: Professional.

We are looking for a Cyber Risk Management Specialist to help us turn cybersecurity insight into clear, actionable risk understanding within Volvo Group.

What you will do

In this role, you will support and drive cyber risk management activities across Volvo Group. You will work closely with cybersecurity specialists, IT teams, business stakeholders, governance functions, and leadership to identify, assess, communicate, and follow up cyber risks in a structured and business‑relevant way.

• Facilitate and perform cyber risk assessments across technologies, services, and organizational contexts.
• Turn technical and business inputs into clear, business‑relevant risk statements.
• Support qualitative and quantitative risk analysis, including likelihood, impact, exposure, and control effectiveness.
• Evaluate security controls from technical safeguards to governance processes.
• Assess control maturity and recommend practical improvement actions.
• Support methods, templates, and tools, and facilitate workshops with technical and non‑technical stakeholders.

Who are you?

You are a structured, analytical, and collaborative cybersecurity professional with a strong interest in cyber risk. You enjoy connecting information across different domains, seeing patterns, and helping others understand what those patterns mean from a risk perspective. You are comfortable working with complex topics, can explain deep technical or specialised matters in clear, jargon‑free language, and adapt your communication for engineers, managers, auditors, or senior leaders. You are self‑driven, curious, diplomatic, and action‑oriented, and you thrive on creating clarity, building trust, and enabling progress in cross‑functional environments.

We believe you bring

• Solid understanding of cybersecurity fundamentals and how domains connect (threats, vulnerabilities, controls).
• Experience supporting or performing cyber risk assessments and turning findings into clear, business‑relevant risk statements.
• Working knowledge of risk management concepts and common security standards or frameworks (GRC, information security).
• Strong communication and facilitation skills in English, with the ability to work effectively with both technical and non‑technical stakeholders.
• Structured and proactive way of working: able to plan, document, and drive work forward in cross‑functional settings.
• Ability to assess control effectiveness and maturity, and translate findings into practical improvement actions.

Nice to have

• Experience with quantitative risk methods (or strong interest in developing in this area).
• Experience with GRC or risk management tools and platforms.
• Certifications such as CISSP, CISM, CRISC, ISO/IEC 27001, FAIR, or similar.
• Background in security advisory, compliance, internal control, assurance, or audit.

Ready for the next move?

Apply now and help us strengthen cyber resilience across Volvo Group. Last application date is July 30th. We will start reviewing the applications in August after the summer holidays.