Information Security Specialist and Data Protection Officer

Information security is a central part of a digitalized operation where the requirements for information protection are constantly increasing. At our organization, information security work is a continuous process and an important part of business development. As an Information Security Specialist and Data Protection Officer (DPO), you will work closely with the municipality's various departments to strengthen and develop the organization's information security efforts. You will contribute to developing structures, routines, and working methods to ensure safe and secure handling of information.

The role involves, among other things, creating and further developing guidelines and routines, conducting analyses and risk assessments, and working proactively to strengthen the organization's information security. You will also provide support to the departments regarding the secure handling of information, personal data, and digital systems.

In the role of Data Protection Officer, you will work independently to monitor and audit the organization's compliance with the General Data Protection Regulation (GDPR). You will serve as a support and advisory function to the departments and contribute with training and guidance on data protection matters.

The Security Department currently consists of a Security Director who is also the Security Protection Director, two preparedness coordinators, two security coordinators primarily focused on crime prevention and safety work, and two IT/Information Security Coordinators/DPOs.

Responsibilities

In the role of Information Security Specialist and Data Protection Officer, your tasks include:

• Develop, implement, and manage the municipality's management system for information security (LIS).
• Coordinate the municipality's work with information and cyber security in accordance with current legislation, including the Cyber Security Act.
• Conduct risk and vulnerability analyses as well as security and data protection assessments.
• Support and guide the departments in matters concerning information security, data protection, and secure handling of information.
• Monitor and audit that the municipality's processing of personal data complies with the General Data Protection Regulation (GDPR).
• Assist the departments in handling, investigating, and following up on information and personal data incidents.
• Report and present issues related to information security and data protection to the municipal management and relevant committees.
• Plan and conduct training and information initiatives to strengthen the organization's knowledge and awareness regarding information security and data protection.
• Follow developments in information security, cyber security, and data protection through environmental scanning.
• Act as the contact person for the Swedish Authority for Privacy Protection (IMY).

The purpose is clear: to prevent, prepare for, and create conditions for the effective handling of unwanted events, and to increase resilience in our operations and for the municipality's citizens.

In this role, you will work closely with other colleagues in the department, forming a team that ensures the progress of the work and support to the administrative management and departments regarding security and preparedness. To succeed in this role, you need to be communicative and have an easy ability to build trust with others. Since you will be working against deadlines, it is required that you are structured and accustomed to prioritizing and planning your work independently.

A large part of your work will involve collaborating internally with our departments as well as with external actors.

Qualifications

We are looking for you who have:

• Relevant university education or equivalent experience that we assess as equivalent.
• Good knowledge of information security and data protection (GDPR).
• Good communication skills.
• Good ability to express yourself in speech and writing in Swedish.

We would like you to be:

• Structured.
• Analytical.
• Collaborative.
• Independent.

The following are considered meritorious:

• Experience working in a politically governed organization.
• Previous experience in investigative work or project management, preferably within municipal or other public sector operations.
• Documented experience regarding signal security and the role of Signal Security Director.
• Experience or education based on the Public Procurement Act.
• Experience of being part of a preparedness group for civil servants on standby at the corporate level.
• Experience working according to the Security Protection Act regarding the preparation of security protection analyses and security protection plans.

Personal Attributes

We will place great emphasis on personal attributes. A holistic view, lack of pretension, close collaboration, and a solution-oriented mindset are highly valued. You have the ability to translate overarching perspectives into practical action and feel comfortable in the role of leading and creating understanding in others, for example when leading project groups. A well-developed ability to see the big picture, build relationships, and collaborate is a prerequisite for success in this role.

Conditions

You must be a Swedish citizen. A security clearance according to the Security Protection Act (2018:585) will be conducted.

An employment with us may be subject to war posting, which you will be informed about if it becomes relevant.

You are part of the municipality's crisis organization, and standby duties may be included in the position.

Since travel is part of the job, a category B driver's license for passenger cars is required.

Permanent employment – probationary employment may be applied.

Location

The position of Information Security Specialist is located within the Municipal Administration Office in the Security Department, and the office is in fully renovated premises at the Town Hall in Köping, but we are positive towards hybrid work.

Our Benefits

• Summer and winter working hours – we work less in the summer and have extra days off.
• A generous flextime system.
• Health allowance.
• Opportunity for holiday exchange.
• Positive and welcoming colleagues.

Our Municipality

Köping is located in Western Mälardalen between Örebro, Västerås, and Eskilstuna. With our 26,000 inhabitants, we are a medium-sized municipality where close collaborations are possible. Working in the municipality is significant and makes a direct difference in the daily lives of Köping residents.

Köping Municipality has made its medieval for recruitment and declines all offers of advertising and recruitment assistance in connection with this advertisement.