Vacant job

We are looking for an Information and Security Engineer for an organization with global responsibility for the development, operation, and management of shared IT environments.

This is a consulting assignment. The location is Linköping, Malmö, or Stockholm. The team works primarily remotely with some on-site presence when needed. Virtual solutions are used for interaction and pair programming, and there are on-site team days 2–3 consecutive days per semester. There is an opportunity to work from nearby offices or hubs.

The position is full-time.

The assignment involves close collaboration with the client, which places high demands on flexibility and teamwork.

The Assignment

As an Information Security Engineer, you work as a requirements setter and analyst in a small cross-functional team within an agile project organization. The role involves ensuring needs and requirements fulfillment, managing technical interfaces, interpreting regulations, contributing to knowledge transfer within the team, and supporting the development, testing, and operation of IT systems in a business with high demands on security and compliance.

Responsibilities

• Work closely with business teams to ensure needs, requirements, and interface management.
• Participate in the development, testing, and operation of IT systems in an agile project organization.
• Work as a requirements setter and analyst, contributing to regulation interpretation and knowledge transfer.
• Conduct security analyses and follow up on internal audit processes.
• Ensure compliance with regulatory requirements such as NIST 800-171 Rev.2, KSF 3.1, NIS2, Cyber Essentials, DSV, and DR.
• Formulate, analyze, and follow up on security-related requirements.
• Work with IAM as well as role- and policy-based access control.
• Perform and support security testing, e.g., MITM testing.
• Collaborate with operational activities and support governance and process work.
• Contribute technical expertise in system development, operational environments, and sprint-based deliveries.

Requirements (OBS, mandatory)

• Security practices – OWASP.
• ISO 27000 series / GDPR / SOC2 / DORA.
• Requirements setting – both formulating and analyzing requirements.
• IAM – role- and policy-based permission systems.
• Practical experience with security testing, e.g., MITM testing.
• Good communication skills in Swedish and English, both verbal and written.

About Us

Centio's overarching goal is to be a consulting company that offers smart and sustainable solutions that develop society in a positive way.

Our employees are offered conditions adapted to the individual. This means that working hours, workload, workplace, and competence development are adjusted as far as possible based on the employee's needs.

Among our employees, you will find engaged people who are passionate about societal development. We work in small groups where you can contribute with your experience while benefiting from others' knowledge and experience.

Well-being and finding a healthy balance between work and leisure are important to us. Therefore, we have a zero-tolerance policy towards stress and prioritize well-being and health.

Please read more about us at centio.se.

Please send your CV in Swedish.

We look forward to your application!