Vacant job

Assignment Description:

Lexicare AB is looking for IT consultants to conduct a comprehensive investigation in line with the requirements and principles used by authorities, such as the Swedish Tax Agency's risk assessment.

Assignment Location: Umeå Municipality is flexible with workplace, and work can be carried out in another location in consultation with the municipality.

Scope:

The assignment is divided into two parts. The first part focuses on Microsoft as a supplier. The second part, with an option, focuses on Microsoft's cloud-based services:

• Part 1: Assessment of whether Microsoft as a supplier can meet the requirements in Article 28 of the GDPR (taking into account, among other things, the CLOUD Act and Microsoft's collection of customer data/information for its own use), as well as the municipality's legal ability to handle information covered by confidentiality under the Public Access to Information and Secrecy Act (OSL) in Microsoft's services. Including an analysis of their ability to meet other regulatory requirements such as GDPR and OSL
• Part 2: Assessment of Microsoft's cloud-based services focusing on conditions and risks related to information security, IT security, data protection, and confidentiality. Based on a prioritized list of current cloud services for the municipality. Prioritization criteria may include dependencies for risk assessment or services used by many. Subject to adjustments.

Current cloud services may include M365 for Apps (Office), Entra, Teams, Sharepoint, Copilot, Azure, Fabric, OneDrive, Defender, and Purview – but may be adjusted based on priorities. Other cloud services from other providers may also be relevant.

The consultant(s) are expected to deliver the following:

• Report or PM: Documented, descriptive assessment including:
• Present how or if Microsoft meets the requirements in art. 28 GDPR and whether the municipality can legally handle confidential information in Microsoft's services with the current technical and contractual solution.
• Identified risks (including risks related to information security, IT security, data protection, and confidentiality).
• Assessment of identified risks as mentioned above
• Proposals for actions and recommendations to reduce or address the risks.
• In parity with the Swedish Tax Agency's assessment, see appendix.
• Workshop: Presentation of the results to relevant stakeholders
• Materials for Continued Work: Training and materials so that the municipality can independently conduct further risk assessments of other cloud services and products after completing the assignment.

Requirements:

• Documented experience in similar risk assessments for public organizations or large enterprises
• Expertise in areas such as:
• Information security and IT security (level 3-4)
• Legal expertise in IT legislation (e.g., OSL and GDPR) (level 3-4)
• Cloud services and technologies
• Ability to analyze and communicate complex information clearly and understandably to various stakeholders

Methodology:

The consultant is expected to use a risk analysis methodology tailored for the public sector and follow established standards.

Schedule:

Contract period: 12 months with an option for a 12-month extension

• Start Date: 2025-01-20
• End Date: 2026-01-20

Objective: We aim to complete part 1 in the first quarter and be able to deliver, based on the municipality's priorities, part 2 before the summer of 2025.

Workshops and Presentations: Planned in consultation with the client

Short Application Period:

We review applications continuously and may fill the position before the application deadline. Feel free to submit your application now!

______

Your Personal Consultant Manager:

We are here for you throughout the process and ensure that everything is taken care of for you. You will have a personal contact person who will handle everything you may need before, during, and after the assignment. Your contact person will also continuously follow up to ensure that you are comfortable in your workplace and that everything is in order.

Being a consultant means being free. We at Lexicare staff with care and match assignments according to your own preferences regarding where you want to work and what tasks interest you. For us, it is important that you as a consultant receive a competitive salary, and therefore, we apply individual salary setting based on your previous experiences and the type of assignment.

ABOUT US:

TOGETHER, WE MAKE SWEDISH HEALTHCARE SAFER AND MORE SECURE.

At Lexicare, we staff with care for regions, municipalities, and private healthcare providers. Our vision is to create a safer and more secure healthcare system together. Our values ​​lie in quality, security, care, and service.

WHY LEXICARE?

Our mantra is that you as a consultant should be able to live a good and healthy life in your profession and reduce the workload for our clients. We work together to prevent Swedish healthcare personnel from leaving prematurely due to factors such as high workload and reduced patient time. At Lexicare, we are there as a safe and secure complement in Swedish healthcare and work together to create a more equitable healthcare system with increased patient safety in our 21 regions and 290 municipalities, both in public and private healthcare providers. We now also staff other sectors and actively work to secure personnel needs for both public and private clients.

As a consultant, you always get:

• A dedicated contact person who is there for you before, during, and after the assignment. Your contact person ensures that all administrative tasks run smoothly and continuously follows up on how everything is functioning at your workplace.

• Your contact person helps and is responsible for your accommodation and travel when needed.

• At Lexicare, we offer a competitive compensation that matches your skills and the type of assignment.

• You are fully insured for all your assignments (including to/from the assignment location) and also have the opportunity for salary exchange for pension insurance, so you can feel safe and secure with us.