IT Security Specialist at Karolinska University Hospital

Karolinska University Hospital is one of the world's leading university hospitals, and we strive to be the best at what is challenging.

We operate in a complex and dynamic environment where IT security is crucial for us to fulfill our mission.

We are now looking for someone who wants to help take IT security to the next level and make a real difference in healthcare!

You are offered

A central role in protecting sensitive information and ensuring that our digital systems operate smoothly and securely. With us, IT security is an integral part of the business, and you will work both strategically and operationally to create solutions that are secure enough without hindering innovation and development.

Of course, you will also benefit from our general benefits that Karolinska University Hospital offers you.

About the position

We are looking for an experienced IT security specialist who can balance strategy and operational work while navigating a world where risk, compliance, and business needs must interact.

By contributing your expertise in IT security, you help create a safe and secure IT environment for both patients and staff, which in turn enables more efficient and reliable operations and care delivery. Your contribution is a vital part of maintaining trust in the healthcare's digital solutions and promoting a safe care experience for all.

With us, you will work with IT security that truly makes a difference. Here you will have the opportunity to work both strategically and operationally while collaborating with competent and engaged colleagues.

The main tasks include, among others:

• designing and developing IT security architecture that considers legal frameworks and regulatory requirements
• participating in the assessment of IT security risks and in requirement setting
• communicating IT security messages to various target groups and driving educational initiatives.
• initiating and implementing IT security improvements in an organization with rapid changes in priorities

You will be located in Solna, and a six-month probationary period applies. The position may become security classified.

We are looking for you who

• have a solid understanding of IT security in practice – someone who sees the big picture but understands the details
• have experience working with IT security in complex environments, where you continuously have to weigh risks, regulations, and business needs against each other
• have the ability to communicate technical security requirements in an understandable way
• can work independently as well as in a team
• have a strong drive by seeing what needs to be done and pushing it forward, even in a changing environment
• are meticulous and take great responsibility for the high quality of your delivery.

We place great importance on personal qualities.

Qualifications

Requirements:

• Academic degree in a relevant field or equivalent work experience
• At least 5 years of experience in IT security work in complex environments with multiple regulations to adhere to
• Deep understanding of risk management in IT security, including threat modeling, risk analysis, and security controls
• Security architecture – Ability to understand the design and development of security solutions that work in practice
• Certifications in CISSP and CISM, ISO/IEC 27001/27002 or equivalent
• Experience in requirement setting for IT security procurement
• Experience in cloud security and hybrid environments
• Knowledge of IAM, SIEM, and secure log management
• Good knowledge of standards, legal requirements, and best practices regarding IT security
• Basic understanding of information security - Understanding the difference between information security and IT security, and the ability to communicate and collaborate with information security experts
• A basic understanding of the General Data Protection Regulation (GDPR) and its application in IT security, combined with the ability to effectively communicate and collaborate with Data Protection Officers (DPO) to ensure compliance and management of data protection issues

Meritorious:

• Knowledge in DevSecOps, incident management, and forensics.
• Knowledge of IT security in AI
• Experience in IT security work in the public sector and/or politically governed organizations, particularly valuable with experience from complex IT environments in healthcare
• Understanding of other relevant legislation, such as the Freedom of Information and Secrecy Act, the Patient Data Act, MDR/IVDR, and the Act on Information Security for Essential and Digital Services

Warm welcome with your application - Together we are Karolinska!

Applying for a job in Region Stockholm

We strive for equality and equity in our workplace and welcome applicants from diverse backgrounds and circumstances.

We only accept applications via this system. Apply by clicking the “Apply” button. Applications by mail or email will not be considered. We kindly ask for no direct contact with staffing and recruitment companies or sellers of additional job advertisements.

Our recruitment system cannot handle anonymous applications or applicants with protected personal data. If you have protected personal data, please contact the contact person mentioned in the advertisement. Your application will then be handled outside the recruitment system. You should also be careful about what information you provide in your application and only include information that is relevant to the current position.

Region Stockholm is responsible for healthcare, public transport, regional development, and contributes to cultural life. Every day, around the clock. In the country's fastest-growing region. Together we create Europe's most attractive metropolitan region.

https://www.regionstockholm.se/jobb (https://www.regionstockholm.se/jobb)