Head of Security

About the Role
You care about building systems that are secure for the right reasons, not to satisfy a checklist but to ensure that organisations can move fast without compromising trust. In previous roles, you were the person who understood how things fit together: infrastructure, product, application security, and the humans behind it. You could dig into code when needed, debug strange issues, improve processes, and communicate clearly across teams.
At Tandem, you’ll bring that mindset to a mission that matters: protecting some of the most sensitive data in Europe while enabling a new generation of AI-powered healthcare tools. As Head of Security, you’ll own and drive our entire security program - from technical controls and SDLC practices to penetration testing, threat modeling, and security culture. You’ll be responsible for setting direction, enabling others, and making security a shared responsibility across the organisation.
This is a role for someone who enjoys both leading and doing. Someone who wants to build a secure-by-default foundation for a fast-moving, high-standards engineering organisation. Someone who understands that great security is as much about usability and collaboration as it is about hardening systems.

What You’ll Do
Lead Tandem’s security function and set our long-term technical and organisational security strategy, setting clear ownership, priorities, and ways of working.
Ensure our infrastructure, internal systems, and applications are secure, reliable, and auditable.
Work hands-on with engineering to embed security throughout the software development lifecycle (SDLC).
Implement and maintain static and dynamic code analysis, dependency scanning, and secure CI/CD integrations.
Own strategy for networking, authentication, secrets management, and container orchestration security.
Build tooling and processes that help developers stay both secure and productive - one of the most important parts of the role.
Lead and coordinate penetration tests, red-team exercises, security reviews, and incident-response workflows.
Collaborate with Compliance and QA on ISO 27001, GDPR, MDR, and other regulatory frameworks.
Drive a strong security culture across all teams – ensuring security considerations permeate engineering, operations, sales, and go-to-market activities.

What You Bring
You have deep, hands-on experience in security engineering, application security, or infrastructure security.
You can both build and break systems and you understand how real-world attacks work.
You’ve led or owned significant parts of a security program in a modern tech company.
You’re pragmatic, collaborative, and able to balance risk with speed.
You communicate clearly across engineering, product, and compliance.
Experience with secure coding practices and the full software development lifecycle.
Experience supporting or leading ISO 27001 audits.
Experience leading teams or security initiatives, with the ability to set direction, mentor others, and create clarity in complex environments.
Strong organisational mindset - you’re comfortable influencing stakeholders outside of engineering and embedding security into everyday decision-making across the company.

Bonus Points
Comfort with SAST/DAST, dependency scanning, and vulnerability management tools
Strong understanding of authentication, IAM, networking, and container orchestration
Previous leadership in a security team or function
Background in threat modeling or penetration testing

Location
We believe the best ideas happen when we’re together. This role is based in our vibrant HQ in the Epicenter building in the heart of Stockholm where you will work primarily from our office to collaborate, connect, and build our culture.
How to Apply
We adopt a continuous selection process, so please make sure to apply with your CV in English.
Our interview process consists of 4 stages:
Screening interview with Talent Acquisition
First interview with our CTO & Co-Founder
System Design Interview
Home case and presentation at our office - Join us in the Stockholm office for a lunch, a presentation and som pair programming to experience our our culture firsthand, collaborate with our team, and see how you work in action.

Benefits
Competitive salary & company stock options
25 days/year of paid vacation
Pension
5,000 SEK wellness allowance (friskvårdsbidrag)
Social and team-building activities (off-sites, after works, winter/summer parties)
An opportunity to make a real positive impact in the world of healthcare
Work with some of the best minds in AI, healthcare, and engineering.

We review our benefits packages on a regular basis and might modify our benefits from time to time.