Information- and cybersecurity that survives contact with reality.
Senior information- and cybersecurity specialist with 30+ years in critical infrastructure — energy, water, aviation, industrial manufacturing and the public sector. I turn NIS2, ISO 27001 and IEC 62443 into operational reality.
A senior hand for regulated complexity.
Seasoned information- and cybersecurity specialist with 30+ years of hands-on experience in critical infrastructure sectors. Currently leading four parallel NIS2 compliance programs — two in energy, one airport, and one rescue services organization.
Deep practical expertise in OT security (IEC 62443), zone and conduit segmentation, IAM/PAM architecture (SSO, federation, RBAC/ABAC, JML), and supply chain risk management. Proven track record of building incident response capabilities from scratch and aligning security investments with business objectives.
Twelve disciplines, one operating system.
Frameworks, standards and methodologies routinely deployed across client engagements.
Four decades, one through-line: trust at scale.
- Aug 2025 — Presentvia Triple z Management ABSyndis / IT-SäkerhetsbolagetSenior Consultant — Information Security, Cybersecurity & NIS2 Compliance
- Leading four concurrent NIS2 compliance projects across energy, aviation and rescue services.
- NIS2 gap and risk analyses (OT/IT/IAM) with prioritized roadmaps, cost intervals and accountability structures.
- Designing incident and reporting procedures aligned with Cybersäkerhetslagen, including exercise and testing frameworks.
- Supply chain security assessments (SCRM): supplier classification, contractual requirements, structured follow-up.
- Governance: information classification, OT/IT segmentation, IAM/PAM principles, logging & change controls.
- Operating as vCISO and external DPO; implementing IMS based on ISO 27001 and ISO 9001.
- Sep 2020 — Jul 2025StockholmAtea SwedenChief Consultant Security & National IRT Lead
- Built Atea Sweden's national Incident Response Team from the ground up — recruited and onboarded 15 specialists.
- Designed the strategic and operational IR framework, NIS2-aligned mandatory reporting timelines.
- Delivered NIS2 planning, gap assessments and implementation support for public sector and utility clients.
- Conducted ISO 27001 ISMS assessments for municipalities, utilities and manufacturers with complex IT/OT.
- Authored the internal GTM playbook for IR services: pricing models, service tiers, value messaging.
- 2016 — PresentFounderTriple z Management ABOwner — Risknavigator™ & AI Risknavigator™
- Strategic consultancy platforms for Information Security, Data Protection and AI Governance.
- Sep 2019 — Apr 2020ASSA ABLOY ABData Protection / GDPR Specialist — global HRIS rollout across 70+ countries.
- Oct 2017 — Aug 2020Ahlsell ABSenior PM EU GDPR Strategy · Interim CISO · Data Protection Manager
- Jan 2017 — Jun 2018Husqvarna GroupInformation Security Consultant & Global EU GDPR Program Manager
- 2010 — 2016Amsterdam · SwedenSandvik Mining & Rock TechnologyStrategic IT Program Director · IT/OT & Supply Chain · PMO Lead
Education & certifications.
Have a complex information security, OT or NIS2 challenge?
Engagements range from short advisory sprints and gap analyses to multi-year program leadership and vCISO mandates.