Vacant job

We are looking for an IT Security Specialist for a government agency responsible for managing payment flows.

This is a consulting assignment. The location is Stockholm.

The position is full-time.

The assignment involves close collaboration with the client, which places high demands on flexibility and teamwork.

The Assignment

The role of IT Security Specialist involves supporting development teams in operational IT security work, including threat modeling, risk analysis, and security assessments. The role includes guidance on the implementation of IT security requirements, interpretation and prioritization of results from security audits, and contributions to strategic and operational security work. The person needs to be able to translate security requirements into technical solutions and reason about IT security from a holistic perspective adapted to the threat landscape.

Responsibilities

Educate and support delivery teams with threat modeling

Conduct IT security audits and risk analyses

Handle and interpret results (application and web penetration tests) from IT security audits and provide support in practical measures

Participate in various projects that require IT security expertise

Maintain and develop governance documents within IT security

Guide in addressing identified vulnerabilities from, e.g., security audits in collaboration with delivery teams and solution architects

Support with operational tasks as needed, e.g., log extraction, daily questions from the business

Participate in the further development of the agency's information and IT security work, both strategically and operationally (based on ISO 27001)

Requirements (Note, mandatory)

Fluent in Swedish, both spoken and written.

At least 5 years of professional experience in qualified IT security work in complex system environments, e.g., network security, encryption, authentication, permissions, security tools, etc.

At least 4 years of professional experience in technical requirements specification regarding IT security, primarily within application development, e.g., OWASP.

Professional experience in threat modeling, risk analysis, and understanding/interpreting the results of penetration tests.

Post-secondary education in Data/I.

Desirable

You have one of the following certifications: CISSP, OSCP, CEH, or similar.

You have experience working in larger complex organizations and the public sector.

Personal qualities

You have excellent collaboration and decision-making skills.

Trustworthy and pedagogical.

Good ability to facilitate and drive meetings/workshops.

About us

Centio's overall goal is to be a consulting company that offers smart and sustainable solutions that positively develop society.

Our employees are offered conditions tailored to the individual. This means that working hours, workload, workplace, and professional development are adapted as much as possible to the employee's needs.

Among our employees, you will find engaged individuals who are passionate about societal development. We work in small groups where you can contribute your experiences while also benefiting from others' knowledge and experience.

For us, well-being is important, and finding a healthy balance between work and leisure. Therefore, we have a zero-vision against stress and prioritize well-being and health.

Please read more about us at centio.se.

Please send your CV in Swedish.

We look forward to your application!