Information Security Specialist

The Swedish Public Pension Agency, SPV, is one of Sweden's largest providers of pension services. We manage occupational pensions and insurance for employers in the public sector and have over 1,100,000 customers, including current and former public employees and pensioners. Our office is located in Sundsvall.

Join us and create societal benefit. We are an authority that wants to make occupational pensions simple for everyone who is or has been a public employee. Our focus is on our customers, decisiveness, and innovation. We believe that working together across the organization is a key to delivering high-quality work.

RESPONSIBILITIES

As an information security specialist, you will play a key role in strengthening the security culture, coordinating systematic information security work, supporting and guiding other operations in information security issues, and ensuring compliance with applicable legislation. Your tasks will include:

• working long-term on improvements in the information security area and enhancing the security culture within the agency
• developing and revising governing documents in the area, as well as improving and developing methodological support and processes
• supporting other operations in information classifications and information security issues
• ensuring that the agency's working methods and information security comply with current and upcoming legislation, such as laws, regulations, and directives related to security, as well as the NIS2 directive (cybersecurity legislation)
• handling incidents related to security and providing support to the organization regarding digitalization and risk management from a security perspective.

In your role, you will also work closely with other competencies in the security area, systematically strengthening security according to ISO27001, analyzing threats and risks based on the external environment, and proposing measures.

You will also be involved in training and informing SPV's employees, which includes developing support materials such as guidelines, methods, and training materials. To some extent, you will also conduct various security-related exercises together with other team members.

QUALIFICATIONS

We are looking for someone with several years of relevant work experience in the field of information security. You should also have excellent knowledge of Swedish, both spoken and written.

It is considered meritorious if you have:

• post-secondary education in information security
• current experience working with management systems in information security (LIS)
• current experience working with/according to ISO standards (e.g., ISO27001)
• current experience in information classification and risk analysis
• good knowledge of legislation and directives related to information security
• current experience with security-related financial regulations, such as DORA
• good knowledge of English, both spoken and written
• current experience with the NIS2 directive and CER

To succeed in this role, your personal qualities are very important, and we will place great emphasis on them in this recruitment.

As a person:

• you are self-driven. You take significant personal responsibility for your tasks. You structure your approach and drive your processes forward.
• you have good collaboration skills. You work well with others and relate to them in a responsive and smooth manner. You listen, communicate, and resolve any conflicts constructively.
• you have specialist knowledge in the area. You understand the professional aspects of the work particularly well. You continuously maintain your specialist knowledge and are a knowledge resource for others.
• you have good judgment. You make thoughtful assessments and priorities. You weigh complex information and various considerations and demonstrate good judgment in statements, actions, and decisions.
• you have pedagogical insight. You have a good understanding of how people absorb knowledge and their different capabilities. You adapt the way you convey your message to the recipient.

ADDITIONAL INFORMATION

With us, you will be warmly welcomed. Here, 250 engaged individuals work, and we believe it is important that you enjoy working with us. We are open to new ideas, our environment, and each other. We like to try new things and have a strong drive forward. We see recruitment as a long-term investment and believe it is important for you as an employee to feel good, have a balance in life, and have the opportunity to develop your talents.

We work in a flexible workplace, both in lovely premises and with some opportunities for remote work. In the SPV building, we recommend a coffee break in our winter garden or why not a moment in our fresh gym. Additionally, we have various wellness activities you can participate in, as there is something for everyone. We strive for diversity and an inclusive perspective at all levels of the organization.

Our operations rest on the common public value base. This is a fundamental starting point for us, regardless of what we work with. Democracy is the overarching principle in the value base, and citizens are our ultimate clients. Other principles in the public value base are legality, objectivity, freedom of opinion formation, respect, as well as efficiency and service.

More information about us as an employer and the employment benefits you are offered can be found under Work at SPV on SPV.se.

The position involves placement in a security class. More information about what security vetting entails can be found here: https://sakerhetspolisen.se/sakerhetsskydd/registerkontroll.html (https://sakerhetspolisen.se/sakerhetsskydd/registerkontroll.html)

We kindly but firmly decline all offers of assistance with advertising and recruitment.