Vacant job

Assignment Description

The assignment aims to establish a clear requirement specification and provide support for security solutions within an organization handling sensitive information and critical infrastructure. The focus is on collecting and analyzing needs from different parts of the organization, as well as ensuring that future technical solutions comply with applicable laws, regulations, and security requirements.

You will work closely with the business and central security functions to ensure that the requirements align with the Security Protection Act, relevant regulatory directives, and established international standards such as ISO 27001 and NIST.

Main Deliverables:

• Compilation of requirements and needs in a structured requirement specification.
• Recommendations based on the conducted analysis of the organization's needs.
• Analysis and documentation of security risks related to requirement specification and technical choices.
• Basis for decisions regarding the design and implementation of security-enhancing measures.

In the role of requirements leader/security consultant, the tasks include:

Requirements Gathering and Analysis

• Plan and conduct workshops and interviews to identify requirements.
• Document, structure, and track requirements to ensure they meet the organization's long-term goals.
• Validate requirements against legal frameworks, industry standards, and internal needs.

Security Adaptation and Risk Management

• Identify and analyze security risks related to the requirement specification and propose proportional measures.
• Ensure compliance with legislation regarding security protection and information security based on the current classification of information.
• Collaborate with specialists to ensure that the requirements meet established security standards.

Coordination and Communication

• Act as a bridge between the business needs, technical specialists, and security functions.
• Support implementation teams in interpreting and translating requirements into practical solutions.
• Ensure a shared vision among all stakeholders.

Reporting and Decision Support

• Produce documentation that clarifies status, risks, and strategic recommendations for management and steering committees.
• Continuously report progress and any deviations.
• Ensure full traceability in the documentation of requirements and results.

Mandatory Requirements

• University education in (e.g., IT, information security, systems development, or requirements management), or equivalent work experience of at least 5 years.
• Certifications or completed courses in requirements analysis or information security. (Certificates or courses must be attached to fulfill the requirements).
• At least 5 years of work experience in requirements gathering and requirements management.
• At least 2 years of work experience in organizations with high security requirements, within the public sector or security-sensitive business processes.
• At least 2 years of work experience in documenting requirements and ensuring traceability throughout the process.
• At least 2 years of work experience in planning and conducting workshops for requirements gathering with multiple stakeholders.
• At least 2 years of work experience working according to Swedish regulations, such as the Security Protection Act and PMFS 2022:1.
• Experience working with various stakeholders at different levels in the organization within the last 2 years.

Desirable Requirements

• Experience working with established security standards, for example:
  - ISO 27001 or equivalent.
• Experience working with established security standards, for example:
  - Basic knowledge of the NIST framework or similar guidelines.
• Experience using tools for requirements management and documentation, for example:
  - Simple requirements tools like Confluence, Azure DevOps, or similar.

Your Application

Does this role sound interesting and suitable? If so, please apply immediately as we are conducting interviews on an ongoing basis and the role may be filled before the application deadline.

We can only accept and process your application by having you register your CV in our portal. Regarding GDPR, we cannot accept applications via email. We warmly welcome your application! The assignment is part of Quest Consulting's staffing services.

About Us

Quest Consulting is an authorized consulting company with collective agreements, insurances, wellness benefits, and occupational pensions. We specialize in IT, Technology, HR, Administration, and Finance. Our goal is to be your personal partner, and that is why it is so important for us to work according to our core values where our guiding principles are to be Personal, Innovative, and Professional.