David Grystad

I lead HiQ's GRC team, around 15 consultants in the Cyber department, and still run assignments myself. We work across the whole GRC field plus AI and agent security: CISO assignments, risk assessments, compliance management and security controls, against GDPR, ISO 27001, ISO/IEC 62443, NIS2, DORA, CRA and the AI Act.
Currently on client assignment at ICA as Data Governance Enablement Lead.

Advisory on EU cyber regulation and AI security. Selected assignments:
- Speed Identity: NIS2, CRA and AI compliance assessments
- Peab: NIS2 security assessments and compliance evaluations
- Svenska Spel: workshops on agentic AI security in the development process
- Nordic SaaS scale-up: agentic AI security review of a RAG-based platform, covering data protection gaps, API surface and output cont

Worked as CISO & Product Owner DW at SF Studios.

Cybersecurity leader with experience in building and implementing security programs, focusing on governance, risk, and compliance. Led a team (employees and consultants) managing multi-million budget and outsourced IT operations, while contributing to measurable security improvements, including phishing vulnerability reduction and group-wide insurance approval.

Project leader with a proven track record of delivering successful technical projects, particularly in automation and data visualization. Experienced in presenting to senior leadership, focusing on improving departmental effectiveness and efficiency through Lean principles, functioning in a role similar to an internal management consultant.

Strategic sales with a proven ability to close high-value deals, focusing on Cisco products, exceeding initial targets by 4 MSEK (400%). Technical expert in Power BI, pioneering new data visualizations and delivering compelling presentations to C-level executives at major Swedish companies.

Business Intelligence consultant specializing in QlikView and QlikSense development. Experienced in creating advanced financial reports for diverse client needs.

Experienced in system administration and IT management, with a strong background in providing technical last-line support for Packsize packaging machines to global customers. Proven ability to train machine operators internationally, and adept at working in a central organizational role

Issued May 2016

Main subject: Computer and systems science.
Minor area: Database technology

Courses Istanbul:
Entrepreneurship
Problems of Philosophy Entrepreneurial Technology Commercialization Introduction to Marketing

Served 10 months at K1 Livgardet in Stockholm, Kungsängen.

Technology programme, Specialization in web design and programming.