# David Grystad David Grystad is a remote worker on Himalayas, Head of GRC at HiQ, based in Sweden. Source: https://himalayas.app/@davidgrystad ```text I lead GRC and AI security engagements across complex regulations. ``` | Detail | Value | | --- | --- | | Availability | Looking for a job | | Location | Sweden | | Authorized to work in | Sweden | | Salary expectations | 800k+ SEK | | Job categories | Governance Risk and Compliance Lead, Chief Information Security Officer, Cybersecurity Consultant, Data Governance Lead, Product Owner, IT Manager, Business Intelligence Developer | | Skills | Governance Risk And Compliance, AI Security, NIS 2, Cyber Resilience Act, Regulatory Compliance, Security Compliance, Cyber Risk Management, Risk Management, Risk Assessment, Security Architecture, DevSecOps, Workshop Facilitation, Team Management, Agile Project Management, Budget Management, Supplier Negotiation, Data Governance, Data Warehouse, Data Modeling, SQL, Qlikview, Power BI, Project Management, Agile, Lean Six Sigma, Lean Process Improvement, Sales, Security Sales, Product Development, Sales Presentations, IT Service Management, Technical Support, Networking, Lean Methodology | | LinkedIn | https://linkedin.com/in/david-grystad-512a2640 | ## What I'm looking for ```text I'm looking to lead and deliver GRC, cybersecurity, AI security, and data-governance work, combining hands-on client assignments with team leadership across complex regulatory environments. ``` ## About ```text I lead HiQ's GRC team of around 15 consultants while delivering client assignments, currently as Data Governance Enablement Lead at ICA. My work spans CISO assignments, risk assessments, compliance management, security controls, and AI and agent security. Previously, I built security programs and led IT teams at SF Studios, alongside experience in business development, technical sales, business intelligence, and IT management. I've supported compliance against GDPR, ISO 27001, ISO/IEC 62443, NIS2, DORA, CRA, and the AI Act. ``` ## Experience ### Head of GRC (current) HiQ. Aug 2026 - Present ```text I lead HiQ's GRC team, around 15 consultants in the Cyber department, and still run assignments myself. We work across the whole GRC field plus AI and agent security: CISO assignments, risk assessments, compliance management and security controls, against GDPR, ISO 27001, ISO/IEC 62443, NIS2, DORA, CRA and the AI Act. Currently on client assignment at ICA as Data Governance Enablement Lead. ``` ### Cyber Security Consultant HiQ. Mar 2026 - Aug 2026 ```text Advisory on EU cyber regulation and AI security. Selected assignments: - Speed Identity: NIS2, CRA and AI compliance assessments - Peab: NIS2 security assessments and compliance evaluations - Svenska Spel: workshops on agentic AI security in the development process - Nordic SaaS scale-up: agentic AI security review of a RAG-based platform, covering data protection gaps, API surface and output cont ``` Skills: Governance-Risk-and-Compliance-(GRC), NIS-2, AI-Security, DevSecOps, Workshop-Facilitation, Regulatory-Compliance, Cyber-Resilience-Act, Security-Sales ### CISO & Product Owner DW SF Studios. Aug 2024 - Mar 2026 ```text Worked as CISO & Product Owner DW at SF Studios. ``` ### CISO & IT Team Lead & BI System Manager SF Studios. Aug 2020 - Jul 2024 ```text Cybersecurity leader with experience in building and implementing security programs, focusing on governance, risk, and compliance. Led a team (employees and consultants) managing multi-million budget and outsourced IT operations, while contributing to measurable security improvements, including phishing vulnerability reduction and group-wide insurance approval. ``` Skills: Team-Management, Security-Architecture, Security-Compliance, Cyber-Risk-Management, Agile-Project-Management, Risk-Assessment, Budget-Management, Data-Warehouse, Supplier-Negotiation ### Business Developer 3 Sverige. Oct 2017 - Aug 2020 ```text Project leader with a proven track record of delivering successful technical projects, particularly in automation and data visualization. Experienced in presenting to senior leadership, focusing on improving departmental effectiveness and efficiency through Lean principles, functioning in a role similar to an internal management consultant. ``` Skills: Project-Management, Agile, Lean-Six-Sigma, Lean-Process-Improvement ### Sale Specialist Technical Services Atea Sverige AB. Jan 2016 - Oct 2017 ```text Strategic sales with a proven ability to close high-value deals, focusing on Cisco products, exceeding initial targets by 4 MSEK (400%). Technical expert in Power BI, pioneering new data visualizations and delivering compelling presentations to C-level executives at major Swedish companies. ``` Skills: Sales, Product-Development, Sales-Presentations, Power-BI ### Business Intelligence Developer Consultant egbs consulting ab. Feb 2015 - Jan 2016 ```text Business Intelligence consultant specializing in QlikView and QlikSense development. Experienced in creating advanced financial reports for diverse client needs. ``` Skills: DevOps, Data-Modeling, Data-Warehouse, SQL, Qlikview ### Support Technician & IT Manager [Packsize](https://himalayas.app/companies/packsize). Feb 2008 - Jan 2010 ```text Experienced in system administration and IT management, with a strong background in providing technical last-line support for Packsize packaging machines to global customers. Proven ability to train machine operators internationally, and adept at working in a central organizational role ``` Skills: IT-Service-Management, Technical-Support, Networking, Lean-Methodology ## Education ### Hewlett Packard Enterprise Selling HPE Enterprise Solutions ```text Issued May 2016 ``` ### Uppsala University Bachelor's Degree, Information Technology. 2011 - 2014 ```text Main subject: Computer and systems science. Minor area: Database technology ``` ### Sabanci University Erasmus Scholarship: Entrepreneurship/Entrepreneurial Studies. 2013 - 2013 ```text Courses Istanbul: Entrepreneurship Problems of Philosophy Entrepreneurial Technology Commercialization Introduction to Marketing ``` ### Military Service 2005 - 2006 ```text Served 10 months at K1 Livgardet in Stockholm, Kungsängen. ``` ### Westerlundska Gymnasiet 2002 - 2005 ```text Technology programme, Specialization in web design and programming. ``` ## Tech stack - QlikView - Microsoft Power BI - SQL - Power BI To contact David, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire). ## People also viewed - [Hummam Wasfi](https://himalayas.app/@hummamwasfi): Principal Consultant Data Protection & AI Governance, ART25 Consulting AB - [Marie Blom](https://himalayas.app/@marieblom): Cyber Risk Management Specialist/Team Leader, Combitech AB - [Jahangir Riaz](https://himalayas.app/@jahangirriaz): Information Security & Data Privacy Officer, TRATON Group - [robin marat](https://himalayas.app/@robinmarat): IT Maintenance Manager, Länsförsäkringar AB - [George Mutune](https://himalayas.app/@georgemutune): Technical Cybersecurity Program Manager, Nexer Telescope - [Madhankumar Mohan](https://himalayas.app/@madhankumarmohan): Cyber Security Consultant, Stonebench Solutions - [Patricia Hernandez](https://himalayas.app/@nicolehp): Governance, Risk & Compliance Analyst, Schneider Electric - [Peter Brage](https://himalayas.app/@peterbrage): Information Security Consultant, Edge Associates - [Imeh Etuk](https://himalayas.app/@imehetuk): Information Security & AI Auditor, International Certification Body LLC - [Sajjad Pasha Mohammad](https://himalayas.app/@sajjadpashamohammad): Security & Risk Management Consultant, Reversec Stockholm