Information Handler for Learning Sector, Ulricehamn Municipality

Ulricehamn Municipality is in an exciting growth phase – we are growing while preserving our small-scale character. As the largest employer with over 2,200 employees in 100 different professional roles, we offer a meaningful working life where development, community, and public benefit meet. With Vision 2040 - "Together towards the future" - we shape an innovative and sustainable everyday life, together. Here, you make a real difference every day, in a culture characterized by courage, engagement, and opportunities to grow, both professionally and personally.

The Learning Sector works for a cohesive and inclusive learning environment for everyone – from the youngest to adults. Together, we create a culture where participation, security, and high expectations are at the center. Through collaboration, language, and presence, we lay the foundation for goal achievement and lifelong learning. The Learning Sector Office is a central unit within the Learning Sector, encompassing a range of professions, such as development leaders, ICT strategists, business developers, local coordinators, as well as child and student health services.

We are now looking for an Information Handler who wants to help develop and strengthen our work within information management, information security, and data protection. We welcome your application!

1 position(s).

RESPONSIBILITIES

In the role of Information Handler, you have overall responsibility for the Learning Sector's work within information security, data protection, and information management. The assignment includes both strategic and operational tasks.

• Strategic security work: You are the sector's information security handler and are responsible for implementing, developing, and managing the information security management system. You drive the work of adapting the operations to the NIS2 Directive and the new Cyber Security Act.
• Data protection and privacy: You are responsible for the Learning Sector's registers according to Article 30 of the Data Protection Regulation (GDPR). The assignment includes conducting impact assessments, handling questions regarding video surveillance, and providing support in data protection-related matters.
• Operational support and management: You support operations in practical matters regarding information handling and actively work to spread knowledge through training and information campaigns. You are also responsible for incident reporting, classification of systems and apps, and drawing up Data Processing Agreements (DPAs).
• Crisis and security issues: You are responsible for matters concerning speaker systems and all-clear alarms during crisis and security incidents.

You are part of the sector office within the Learning Sector and will also contribute to other overarching assignments and administrative tasks.

QUALIFICATIONS

We are looking for you who have relevant education in information security as well as a university degree or other experience that the employer considers equivalent. You have experience working with information security and good knowledge of relevant legislation in the field. It is an advantage if you have knowledge of:

• Cyber Security Act (NIS2)
• Data Protection Regulation (GDPR)
• AI Act
• LOU, the Public Procurement Act
• Video Surveillance Act

It is meritorious if you:

• have experience of information security work within public operations
• are accustomed to giving training and lectures
• have experience leading working groups or projects

As a person, you are structured, responsible, and have good ability to express yourself in speech and writing. You work methodically and are used to writing reports and summaries. You are judicious, flexible, and have an easy time switching between strategic and operational tasks. We value that you have good cooperation skills, are relationship-building, and enjoy working both independently and together with others.

Employment type: Fixed-term employment.
Duration: 6 months or longer.

The position is fixed-term for two years with the possibility of extension.

We kindly decline contact from advertisers and staffing agencies during the recruitment process.

When applying for jobs with us, we only accept applications via our recruitment system for processing in accordance with GDPR.

Please note that according to the principle of public access, application documents are public documents that are released upon request. If you, as an applicant, are subject to confidentiality, please contact the contact person for the advertisement.