Information Security Specialist

We are looking for someone who wants to work in a central role to further develop and strengthen our systematic information security work.

If you are experienced in the field and looking for a developing assignment - read more below and apply!

About the role and your tasks

As an information security specialist, you will work systematically to support the organization in ensuring that the municipality's information is handled correctly and securely from a cybersecurity perspective. The role involves leading and driving change, taking responsibility for smaller projects, and switching between strategic development and operational work. You will operate in a complex environment where risk management, regulatory compliance, and the needs of the organization must be balanced to create effective and robust information management.

The work largely consists of supporting the organization in procurement, conducting risk analyses, communicating overarching requirements, holding workshops, monitoring and following up, and conducting training in the area. Designing and contributing to internal policies and processes to protect information is also part of the tasks. The role requires staying updated on new threats, vulnerabilities, and legislation affecting information security. The information security work is conducted according to the ISO 27001 standard.

We are looking for you

Our mission is to create success for the whole; we consider the best interests of the entire organization in actions and decisions. This means you must be able to focus on being relevant to the larger perspective. You will collaborate with many different functions in the municipality, which places high demands on your communication skills. You know how to convey your message, adapt tone and format to the target audience, and create understanding even in complex issues. As a person, you collaborate easily with others, you are agile in your dialogue, and you build good relationships. When challenges arise, you handle them constructively and solution-oriented.

We are looking for someone with a few years of experience working with information security. You must have good knowledge of and experience with the following:

• Development of governing documents in information security
• Risk analyses and evaluation of these
• Procurement work from an information security perspective
• ISO 27001 standard
• Information security work related to NIS2
• Change and project management related to information security

It is a plus if you also have experience with:

• Public sector
• Data protection and GDPR
• NIST and CIS controls

To succeed in the role, you need to enjoy working together with others in a results-oriented environment where delivering high quality is a given goal. At the same time, you have the ability to plan, prioritize, and lead your work independently. You take initiative, follow up, and show both curiosity and drive in your processes. You feel confident in leading change and working in project form within the information security area.

You have good knowledge of the Swedish language in speech and writing, and you easily absorb information and literature in the field in English.

We offer you

When you become part of us, you get more than just a job; you become part of a context. Here you will meet friendly and competent colleagues who are happy to share their knowledge and experience. We believe in collegial learning, where we support and inspire each other to develop together. With us, exciting and meaningful assignments await where you can contribute, grow, and make a difference - every day.

As an employee with us, you are offered a range of benefits focusing on balance, security, and health. Lund Municipality is a large organization with many exciting activities and opportunities for employee development. As an employee, you will also have access to our benefits portal where you can easily see and manage your benefits. Read more here (https://lund.se/arbete-och-lediga-jobb/sa-ar-det-att-arbeta-med-oss/det-har-ger-vi-dig-som-medarbetare).

About the recruitment

In this recruitment, we have removed the personal letter and replaced it with questions relevant to the position. Your answers are therefore important in our selection process.

We will hold the first digital interviews via Teams during weeks 6 and 7 and final interviews on-site during weeks 9 and 10. We therefore ask you to plan your availability.

About the workplace

The unit for information security and data protection has an exciting mission! Our work ranges from regulatory compliance to organizational development and encompasses the entire municipality's organization and all its operational areas. The unit's mission is to harmonize the municipality's information and data protection work, create clearer direction, and drive our joint work forward based on the group's collective ambitions regarding digitalization. The workgroup consists of a CiSO, lawyer, information security, and data protection specialists who together are responsible for establishing common working methods and ensuring coordinated support for all of the municipality's operations.

We believe in the power of collaboration and work closely with different units to solve complex challenges together, promote the municipality's development, and contribute positively to citizens' everyday lives.

At the municipal office, about 400 employees work within strategic functions. Together, we ensure that the municipality is an efficient and modern organization. Right now, we are on an exciting development journey with the goal of functioning as a driving force in the development of the entire organization. Where we take responsibility for the whole and focus on the best interests of the citizens.

Here you will have room to grow. Within Lund Municipality, we place knowledge at the center and create opportunities to develop in working life. We offer an inclusive work environment and a chance to influence and make a difference. Do you want to become one of us?