ML DIGITAL BRANDS

Brand Ambassador

STAYAHEAD AI

Content Creator

Global Retail Health and Personal Care Company

Information Security Audit Program Owner

Global CPG Company

Senior Advisor | GRC and Cybersecurity

addGRC - Governance, Risk, and Compliance

We add governance, risk, and compliance by providing businesses with experienced and accredited GRC professionals. 

Our mission is to help businesses stay safe, compliant, and successful by providing GRC and Cybersecurity guidance and solutions. 

We are a virtual consulting and recruitment company and we leverage our extensive network of experienced and accredited professionals within our area of expertise to handpick the right competence for our customers' needs.

🟠 Ready to take your cybersecurity and GRC career to the next level? Follow addGRC for expert advice, job postings, and consulting opportunities!

Founder and CEO

OKQ8

Markus led a team of skilled specialists in the creation of a security platform designed to aid OKQ8's journey towards a sustainable future. He was responsible for Information Security and IT security as well as the budget and resources (employees and consultants) for the department he was head of.

Head of Information and IT Security (CISO)

DigitalRoute

Markus was responsible for Security Governance, Risk Management, and Compliance. The assignment included preparing the organization for three upcoming audits (ISO 27001 and ISO 9001 certification audits and a SOC 2 Type II audit).

CISO and Head of Compliance

AB Trav och Galopp

Markus was contracted to take the lead in an Information Security Management System (ISMS) implementation initiative. Where the first phase consisted of creating the Governing Documents that would form the foundation for the ISMS. After Senior Management approval of the documents, Markus delivered training and awareness sessions to the organization for the decided Information Security requirements as well as taking lead on the second phase of the initiative: implementing processes, controls, and technical security measures in order to achieve the objectives and adhere to the requirements stipulated in the governing documents. The implementation areas included Supplier Governance, Risk Management, Privacy, and Internal Control over financial reporting.

Cyber Security Consultant

Markus was contracted to make sure the client would be prepared for and pass the certification audit that is a part of obtaining and retaining a license to operate in the Swedish gambling market. The work consisted of cybersecurity governance, risk management, and IT compliance.

GRC Consultant

DeLaval

Markus was the Project Leader and Subject Matter Expert for the GDPR Compliance project. The project consisted of several streams including Data and Process Mapping, Privacy Risk Management, Personal Data Breach handling, and Data Protection Governance and Markus's role was making sure all relevant functions delivered as planned as well as providing expertise and guidance within the areas of privacy, risk, compliance, and information security.

Project Leader/Subject Matter Expert (SME)

Markus was the acting Data Protection Officer for a global manufacturing company with responsibility for privacy and data protection. The role consisted of legal and information security-related advice to employees and senior management and Markus was the single point of contact for privacy and data protection compliance during the assignment.

Data Protection Officer

Transcendent Group

Markus worked as a senior consultant within the department IT Governance and Security, making use of his knowledge and experience in areas such as:

• Design, implementation, testing and evaluation of Information Security
requirements
• Design, implementation, testing and evaluation of internal controls
• IT and Information Security Governance
• Project Management
• Regulatory compliance
• IT Audit

Senior Consultant

With 15 years of experience in Governance, Risk, and Compliance (GRC) and cybersecurity, I'm now exploring my other passions in self-improvement and emerging technology.

As AI advancements continue to shape the future of work, I'm more convinced than ever that it's essential to focus on honing the distinctive human abilities that make us stand out. That's why I'm passionate about helping people succeed in this new landscape and redefine what success means in the age of AI.

Through personal development strategies and systems, I aim to empower people to excel in an automated, AI-driven world.

With a dual Master's degree in Business Administration and Information Technology, along with being a Certified Information Security Manager (CISM) and Certified Information Systems Auditor (CISA), I bring a wealth of expertise in Governance, Risk, and Compliance (GRC), cybersecurity, privacy, and IT audit. I am dedicated to providing ongoing support to my clients in these fields, while pursuing my other passions.

Markus Lannsjo

Svanström Consulting

* Erfarenhet av att leda och implementera informations- och it-säkerhetsstrategier på koncernnivå.  
* Pedagogisk och lösningsorienterad kommunikation: Förmåga att agera som en rådgivare till verksamheten i säkerhetsfrågor och utveckla effektiva awareness-program.  
* Kompetens inom områden som informationssäkerhet, it-säkerhet, riskhantering, kris- och kontinuitetsplanering samt regelverksimplementering.  
* Erfarenhet av att skapa och utveckla CISO-funktioner, inklusive rekrytering av nyckelpersoner och implementering av styrnings- och rapporteringsstrukturer.  
* Djupgående kunskap och erfarenhet inom informationssäkerhet och riskhantering inom försäkrings- och bankverksamhet.  
 
Med utgångspunkt från det erbjuder Jonas konsulttjänster inom informationssäkerhet och riskhantering som adresserar specifika behov och utmaningar för organisationer inom finansiell sektor.

Information Security Consultant

Skandia

acting Chief Security Officer, responsible for information security, BCM, it-security, Identity and access management

acting CSO

Head of Group information security function which includes strategic, tactic and operational responsibility within the areas of Information security, Business Continuity Management and Privacy/data protection. The responsibility also includes staffing as well as budget.

CISO / Informationssäkerhetschef

Assist in the identification and management of IT security risks, perform supplier it-audits, implementing and monitoring control frameworks, keeping track of regulatory developments within financial sector 

• Monitor and support the IT organization regarding risk management, internal controls and compliance  
• Develop and implement internal controls 
• Maintain and develop the IT compliance process with regard to applicable internal and external rules, regulations, company policies and standards  
• Monitor and report IT risks and Compliance gaps with respect to internal and external regulations 
• Ensure IT outsourcers comply with applicable internal and external rules and regulations and company policies and standards 
• Support the process of creating and aligning policies, standards and guidelines within the IT organization

IT Risk & Compliance Manager

• Facilitate risk workshops and perform risk assessments (internally and with suppliers/vendors) 
• Further develop the methodology for risk management for the Nordic IT Organizations 
• Reporting of risk landscape

Risk Manager

I worked as a consultant within IT Risk and Advisory Services at Transcendent Group. I performed IT audits with different focus areas, both technical audits and audits with focus around IT Governance. I also performed assessments of third-party service providers’ compliance with customer control requirements, as well as data analysis projects.

I was engaged in assignments within the following areas: 
• Test and evaluation of IT General Controls 
• Process design/mapping 
• Third party assessments 
• Implementation of framework for assessing third party suppliers 
• Risk assessments 
• Project reviews 
• Compliance testing

Consultant within IT Risk and Advisory Services

Deloitte

• IT-audits of several mid-size and large companies, including testing of IT-controls as well as mapping processes and identifying IT-related risks. 
• Testing of IT general controls with regard to Sarbanes-Oxley
• Project reviews 
• Software license audits 
• Application audits with focus on access controls and data processing 
• Information security audits

Svenska Handelsbanken

During my time of studies, I gained experience from Svenska Handelsbanken where I sold bank products and helped customers with their transactions.

Bank employee

CISO with strategic, tactical and operational responsibility for information security, crisis & continuity and risk & compliance. Experience of working group-wide with several subsidiaries within financial sector. Leader and manager with budget responsibility. Very good communication skills and experience of reporting to management teams and the board

Certified Information Security Manager (CISM)
Certified in Risk and Information Systems Control (CRISC)
Certified Information Systems Auditor (CISA)

taplio

The Battle

Markus Lannsjo

Jonas Svanström

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?