Information Security Specialist and Data Protection Officer

The Municipal Executive Administration works to streamline operations to free up resources for core activities in other administrations. The administration works with a high degree of coordination and standardization to ensure a holistic view, efficiency, and quality. Another very important part of the operations is to develop and manage the municipality's common processes and working methods.

The Workplace

The world is changing rapidly, and the demands for information security are increasing. We want to be well-prepared if something happens. For us, security work is not a side issue, but something we actively build and develop every day.

As an Information Security Specialist and Data Protection Officer, you will help strengthen the municipality's resilience. You assist the operations in doing things right from the start, ensure that we handle personal data and systems safely, and contribute to maintaining a high level of cybersecurity and data protection.

You will work closely with colleagues in the security unit and support the entire organization in security issues, civil defense, and crime prevention work – from schools and care to hydropower and digital services. This is a role for you who enjoy taking initiative, driving development, and thinking both broadly and concretely when needed.

As a Data Protection Officer, you also have an independent review and advisory role according to the General Data Protection Regulation (GDPR). You support the operations with qualified advice and follow up on compliance.

In this role, you will also be part of the municipality's council for secure information management.

Job Responsibilities

In the role of Information Security Specialist and Data Protection Officer, you will support the operations in handling information and personal data securely. You will do this by independently or in collaboration with others developing the organization's ISMS, leading information classifications and impact assessments, conducting training, and assisting with requirements specification during procurements.

As an Information Security Specialist, your responsibilities include:

• Developing and managing the municipality's information security management system (ISMS) according to ISO 27001/27002.
• Coordinating the municipality's work related to NIS2/Cybersecurity Act, including risk management, incident reporting, compliance, and documentation.
• Conducting risk and vulnerability analyses, information classifications, and security assessments.
• Participating in projects related to digitalization, cybersecurity, and data protection.
• Reporting to municipal management and committees on status and development needs.
• Following up on incidents, improvement measures, and security actions.
• Planning and conducting training and communication efforts.
• Working with environmental monitoring.

As a Data Protection Officer:

• Following up and ensuring that the municipality's personal data handling is legal.
• Providing independent advice to the operations on data protection issues.
• Being the contact point for the Swedish Authority for Privacy Protection (IMY).
• Advising the operations on matters related to personal data processing, DPIA, and record-keeping.
• Reporting to municipal management and committees on the status and development needs of data protection work.
• Following up on incidents and working closely with functions within information security and operational protection.

Qualifications

We are looking for someone who has:

• A relevant degree from a university or other education or experience that we assess as equivalent.
• Good communication and pedagogical skills — you must be able to explain complex issues in an understandable way.
• A valid driver's license (B).
• Good knowledge of Swedish in both spoken and written form.

It is an advantage if you have:

• Work experience in information security/data protection.
• Good knowledge of public access and secrecy legislation.
• Experience in planning and conducting training.
• Basic knowledge of IT security and understanding of various technical protections.
• Experience in specifying requirements during procurements where high demands are placed on information security and data protection.
• Experience working with information security and personal data incidents.
• Experience with AI or cloud services.

You are proactive and enjoy collaborating with others, but you also have a strong ability to work independently. As a person, you are goal-oriented, have strong integrity, and excellent collaboration skills. For the position, it is required that you are a good communicator and express yourself well in both spoken and written Swedish. You are analytical, work in a structured manner, and take responsibility for your own assignments. The work is changeable, and you need to be flexible regarding new tasks and continuously work on developing your skills. In the recruitment process, we will place great emphasis on personal qualities, especially your ability to collaborate and communicate.

What You Get from Us!

In addition to working with exciting issues in a varied everyday life, you will have the opportunity to become part of an organization that maintains important community functions for residents of Ludvika municipality. As an employee with us, you will have access to wellness benefits, good opportunities for professional development, and the option to exchange vacation day benefits. Please read more on ludvika.se under the heading Work with Us.

In Ludvika municipality, we work according to our values, which consist of four principles: Relationships, Joy, Learning, and Drive. It is based on collaboration and cooperation, a sense of community, and a desire to continue developing. It is with these values that we approach our mission and strive towards our vision of being the municipality of the future, growth, and opportunities.

Employment Type

Employment Type: Permanent position
Extent: Full-time
Working hours: Daytime
Start date: By agreement
Number of positions: 1

Additional Information

This position is placed in a security class, which requires a security clearance. Approved security clearance is a prerequisite for employment. Job interviews will be held in week 5.

If you have a protected identity, please do not apply for the job here on the web, instead contact us.

Inquiries

Manager
David Helsing, Security Manager. 0240-86096
Employee organizations 0240-86000

Application

Welcome with your application by January 18, 2026. We only accept applications via our recruitment system.

We kindly decline all offers of candidate mediation and advertising and recruitment assistance in connection with this advertisement.