Vacant job

Avaron AB is a growing consulting company focused on technology, finance, and operational support. We match your expertise with the most interesting assignments on the market and offer a platform where your development is at the center.

We are looking for an IT security specialist who wants to contribute to strengthening information and IT security in a critical government environment. You will be part of a virtual team with both IT security and information security expertise and work closely with various parts of the organization as well as operations, management, and development. The role is proactive and involves identifying areas for improvement and proposing measures that enhance the security level over time.

• Support information classification and translate classification into appropriate protective measures in existing and upcoming IT systems
• Provide support and advice to IT specialists and the organization at large
• Develop, improve, and document procedures and guidelines within information and IT security
• Manage incidents and cases related to security
• Conduct audits, follow-ups, and compliance checks
• Plan, lead, document, and follow up on threat and risk analyses

• Excellent ability to express yourself in Swedish, both spoken and written
• At least 5 years of experience working with IT/information security within government, municipality, or region, or at a larger company (over 100 employees)
• Good experience in working with, supporting, leading, and documenting threat and risk analyses
• Experience with cybersecurity frameworks such as NIST CSF, CIS Controls, COBIT, ISO 27001/27002, or similar
• Ability to undergo and pass a security clearance (requires Swedish citizenship, dual citizenship is not accepted)

• Experience in security protection work within government, municipality, or region, or at a larger company (over 100 employees)
• Experience in writing formal documentation within IT/information security, such as strategies, policies, and guidelines
• Experience in coordinating, driving, and following up on training initiatives in cybersecurity
• Certification such as CISSP, CISM, or equivalent
• Certification such as CISA, CompTIA Security+, GIAC GSEC, or equivalent

Our positions may be filled before the application deadline, as we process applications continuously. We therefore recommend that you apply as soon as possible.