Information Security Specialist and Data Protection Officer

The municipal administration works to streamline operations to free up resources for core activities in other departments. The administration operates with a high degree of coordination and standardization to ensure a holistic view, efficiency, and quality. Another very important part of the operations is to develop and manage the municipality's common processes and working methods.

Workplace

The world is changing rapidly, and the demands for information security are increasing. We want to be well-prepared if something happens. For us, security work is not a side issue, but something we actively build and develop every day.

As an Information Security Specialist and Data Protection Officer, you will help strengthen the municipality's resilience. You assist the departments in doing things right from the start, ensure that we handle personal data and systems safely, and contribute to maintaining a high level of cybersecurity and data protection.

You work closely with colleagues in the security unit and support the entire organization in security matters, civil defense, and crime prevention work – from schools and care to hydropower and digital services. This is a role for you who enjoys taking initiative, driving development, and thinking both broadly and concretely when needed.

As a Data Protection Officer, you also have an independent review and advisory role according to the General Data Protection Regulation (GDPR). You support the departments with qualified advice and follow up on compliance.

You will also be part of the municipality's council for secure information management.

Responsibilities

In the role of Information Security Specialist and Data Protection Officer, you will support the departments in managing information and personal data securely. You do this by independently or in collaboration with others developing the organization's ISMS, leading information classifications and impact assessments, conducting training, and assisting with requirements during procurements.

As an Information Security Specialist, your responsibilities include:

• Developing and managing the municipality's information security management system (ISMS) according to ISO 27001/27002.
• Coordinating the municipality's work related to NIS2/Cybersecurity Act, including risk management, incident reporting, compliance, and documentation.
• Conducting risk and vulnerability analyses, information classifications, and security assessments.
• Participating in projects related to digitization, cybersecurity, and data protection.
• Reporting to municipal management and committees about status and development needs.
• Following up on incidents, improvements, and security measures.
• Planning and conducting training and communication efforts.
• Working with environmental monitoring.

As a Data Protection Officer, your responsibilities include:

• Monitoring and ensuring that the municipality's personal data management is conducted legally.
• Providing independent advice to the organization on data protection issues.
• Being the contact point for the Swedish Authority for Privacy Protection (IMY).
• Advising the organization on matters related to personal data processing, DPIA, and record-keeping.
• Reporting to municipal management and committees on the status and development needs of data protection work.
• Following up on incidents and working closely with functions within information security and operational protection.

Qualifications

We are looking for someone who has:

• A relevant degree from a university or other education or experience that we consider equivalent.
• Good communication and pedagogical skills — you must be able to explain complex issues in an understandable way.
• A valid driver's license (B).
• Good knowledge of Swedish in both spoken and written form.

It is meritorious if you have:

• Work experience in information security/data protection.
• Good knowledge of public access and secrecy legislation.
• Experience in planning and conducting training.
• Basic knowledge of IT security and understanding of various technical protections.
• Experience in setting requirements during procurements where high demands on information security and data protection are placed.
• Experience working with information security and personal data incidents.
• Experience with AI or cloud services.

You are proactive and enjoy collaborating with others, but you also have the ability to work independently. As a person, you are goal-oriented, have strong integrity, and excellent collaboration skills. For the position, you need to be a good communicator and express yourself well in spoken and written Swedish. You are analytical, work systematically, and take responsibility for your own tasks. The work is variable, and you need to be flexible regarding new tasks and continuously work on developing your skills. In the recruitment process, we will place great emphasis on personal qualities, especially your ability to collaborate and communicate.

What you will get from us!

In addition to working on exciting issues in a varied everyday life, you will have the opportunity to become part of an organization that maintains important community functions for residents of Ludvika municipality. As an employee with us, you will have access to wellness benefits, good opportunities for professional development, and the option to exchange vacation day allowances. Please read more at ludvika.se under the section Work with us.

In Ludvika municipality, we work according to our values, which consist of four principles: Relationships, Joy, Learning, and Drive. It is based on collaboration and cooperation, a sense of community, and a desire to continue developing. It is with these values that we approach our mission and strive towards our vision of being the municipality of the future, growth, and opportunities.

Employment form

Employment form: Permanent position
Extent: Full-time
Working hours: Daytime
Start date: By agreement
Number of positions: 1

Additional information

This position is classified in a security class, which entails a security clearance. Approved security clearance is a prerequisite for employment. Job interviews will be held in week 5.

If you have a protected identity, please do not apply for the job here on the web; instead, contact us.

Inquiries

Manager
David Helsing, Security Manager. 0240-86096
Employee organizations; Vision and the Academic Union 0240-86000

Application

Welcome with your application by January 18, 2026. We only accept applications via our recruitment system.

We kindly decline all offers of candidate mediation as well as advertising and recruitment assistance in connection with this advertisement.