About
A bit about who I am, what I enjoy building, and why security matters to me.
I'm Arvid Berndtsson, an information security lead and full-stack developer based in Malmö & Varberg, Sweden. I help companies turn security requirements into practical systems, controls, and engineering habits.
What I do
I work across security leadership and hands-on engineering: ISO 27001, SOC 2, TISAX readiness, risk management, vendor assessments, access reviews, secure development workflows, incident readiness, customer security questions, AI governance, and modern web applications.
A lot of my work is about making security operational. That can mean rebuilding an ISMS, setting up evidence and control workflows, introducing code and vulnerability review tools, improving backup and incident exercises, answering customer trust questions, or helping teams choose safer ways to build with AI.
Happy to chat about security programs, customer trust, secure development, AI governance, or useful software.
Background
I studied computer science and information architecture at Malmö University, and security engineering at Blekinge Institute of Technology before that. I keep learning through courses and programs in security, compliance, and startup practice, from ISO 27001 and threat intelligence to accelerators like Minc and Drivhuset.
Education
- Aug 2022 to Jun 2025 Bachelor of Philosophy, Computer Science and Information Architecture Malmö University
- Aug 2020 to Oct 2021 Civilingenjör i datorsäkerhet Blekinge Institute of Technology
- Aug 2017 to Jun 2020 Gymnasieexamen, Teknikprogrammet - Media & Information Technology Peder Skrivares skola
Selected courses & programs
- Jul 2025 Leveraging AI for Threat Intelligence LinkedIn
- May 2025 ISO 27001:2022 - The Annex A Controls LinkedIn
- May 2025 Securing the IoT: Security Risks LinkedIn
- Oct 2024 Virtual Exchange Hackathon - Towards Creating Global Citizenship South Africa - Sweden University Forum (SASUF)
- Jun 2024 Sustainergies Academy Sustainergies
- May 2024 Career Essentials in Generative AI Microsoft
- Apr 2024 Executive Leadership (2019) Project Management Institute
- Mar 2024 Business Development Foundations LinkedIn
- Mar 2024 ISO 27001:2022-Compliant Cybersecurity LinkedIn
- Jan 2024 Minc Pre-Incubator Minc
- Oct 2023 Minc Sprint Minc
- Apr 2023 Level Up - Drivhuset's Pre-Incubator Diploma Drivhuset Malmö
Plus 2 more. See LinkedIn for the full list.
I work with
A few of the tools, languages, and practices I use day to day.
Methodology & security
Information Security, ISO 27001, Risk Management, Security Compliance, DevSecOps, DevOps, Infrastructure as Code, Machine Learning, RAG, Data Scraping
Programming
Python, TypeScript, Rust, C++, JavaScript
Frameworks & technologies
Angular, .NET, GraphQL, Qwik
Platforms
Cloud Security, Cloudflare, Linux
Tools
Git, SQL Server, Logging & Monitoring
Beyond work
When I'm not working on security or code, I enjoy reading, exploring Malmö, and the occasional run.
Get in touch
The best reasons to reach out are information security, compliance, customer trust, secure software, AI governance, or practical product and engineering ideas. You can reach me at [email protected], or on GitHub and LinkedIn.