Vacant job

Assignment Description:

Lexicare AB is looking for IT consultants to conduct a comprehensive investigation in line with the requirements and principles used by authorities, such as the Swedish Tax Agency's risk assessment.

Assignment Location: Umeå Municipality is flexible with workplace, and work can be carried out in another location in consultation with the municipality.

Scope:

The assignment is divided into two parts. The first part focuses on Microsoft as a supplier. The second part, with an option, focuses on Microsoft's cloud-based services:

• Part 1: Assessment of whether Microsoft as a supplier can meet the requirements in Article 28 of the GDPR (taking into account, among other things, the CLOUD Act and Microsoft's collection of customer data/information for its own use) and the municipality's ability to legally handle information covered by confidentiality under the Public Access to Information and Secrecy Act (OSL) in Microsoft's services. Including an analysis of their ability to meet other regulatory requirements such as GDPR and OSL.
• Part 2: Assessment of Microsoft's cloud-based services focusing on conditions and risks related to information security, IT security, data protection, and confidentiality. Based on a prioritized list of current cloud services for the municipality. Prioritization criteria may include dependencies for risk assessment or services used by many. Subject to adjustments.

Current cloud services may include M365 for Apps (Office), Entra, Teams, Sharepoint, Copilot, Azure, Fabric, OneDrive, Defender, and Purview – but may be adjusted based on priorities. Other cloud services from other providers may also be relevant.

The consultant(s) are expected to deliver:

• Report or Project Plan: Documented, descriptive assessment including:
• Present how or if Microsoft meets the requirements in Art. 28 of the GDPR and whether the municipality can legally handle confidential information in Microsoft's services with the current technical and contractual solution.
• Identified risks (including risks related to information security, IT security, data protection, and confidentiality).
• Assessment of identified risks as above.
• Proposals for actions and recommendations to reduce or address the risks.
• In line with the Swedish Tax Agency's assessment, see appendix.
• Workshop: Presentation of the results to relevant stakeholders.
• Materials for Continued Work: Training and materials so that the municipality can independently conduct further risk assessments of other cloud services and products after completing the assignment.

Requirements:

• Documented experience in similar risk assessments for public sector entities or large organizations.
• Expertise in areas such as:
• Information security and IT security (level 3-4).
• Legal expertise in IT legislation (e.g., OSL and GDPR) (level 3-4).
• Cloud-based services and technologies.
• Ability to analyze and communicate complex information clearly and understandably to various stakeholders.

Methodology:

The consultant is expected to use a risk analysis methodology tailored for the public sector and adhere to established standards.

Schedule:

Contract duration: 12 months with an option for a 12-month extension.

• Start Date: 2025-01-20
• End Date: 2026-01-20

Goal: We aim to complete Part 1 in the first quarter and be able to deliver, based on the municipality's priorities, Part 2 before the summer of 2025.

Workshops and Presentations: Planned in consultation with the client.

Short Application Period:

We review applications continuously and may fill the position before the application deadline. Feel free to submit your application now!

______

Your Personal Consultant Manager:

We are here for you throughout the process and ensure that everything is taken care of for you. You will have a personal contact person who will handle everything you may need before, during, and after the assignment. Your contact person will also continuously follow up to ensure that you are comfortable in your workplace and that everything is in order.

Being a consultant means being free. At Lexicare, we staff with care and match assignments according to your own preferences regarding where you want to work and which tasks interest you. It is important to us that you, as a consultant, receive a competitive salary, and therefore, we apply individual salary setting based on your previous experiences and the type of assignment.

ABOUT US:

TOGETHER, WE MAKE SWEDISH HEALTHCARE SAFER AND MORE SECURE.

At Lexicare, we staff with care in regions, municipalities, and private healthcare providers. Our vision is to create a safer and more secure healthcare system together. Our values ​​lie in quality, security, care, and service.

WHY LEXICARE?

Our mantra is that you, as a consultant, should be able to live a good and healthy life in your profession while reducing the workload for our clients. We work, among other things, towards preventing Swedish healthcare personnel from leaving prematurely due to factors such as high workload and reduced patient time. At Lexicare, we are there as a safe and secure complement in Swedish healthcare and work together to create a more equal healthcare system with increased patient safety in our 21 regions and 290 municipalities, both in public and private healthcare providers. We now also staff other sectors and actively work to secure staffing needs for both public and private clients.

As a consultant, you always get:

• A dedicated contact person who is there for you before, during, and after the assignment. Your contact person ensures that all administrative tasks run smoothly and continuously follows up on how everything is functioning at your workplace.

• Your contact person helps and is responsible for your accommodation and travel when needed.

• At Lexicare, we offer a competitive compensation that matches your skills and the type of assignment.

• You are fully insured for all your assignments (even to/from the assignment location) and also have the opportunity for salary exchange for pension, so you can feel safe and secure with us.