Data Protection Officer and Information Security Coordinator for Tomelilla and Simrishamn Municipalities

In Österlen, we create the conditions for a high quality of life, where Tomelilla Municipality serves as a place for inspiration and development. The municipality has approximately 800 employees, and we offer you excellent opportunities for professional growth, involvement through trust, and the possibility to balance work and leisure.

We are currently on a development journey focused on streamlining and improving our services. Our ambition is to be leaders in leveraging the opportunities provided by digitalization. In short – we want to make life easy for everyone who lives in, works in, or visits Tomelilla Municipality.

We are now seeking a Data Protection Officer (DPO) for Tomelilla and Simrishamn Municipalities, who will also serve as one of two Information Security Coordinators. Together with the information, emergency preparedness, security, and safety coordinators, you will develop work related to data protection and information security, as well as contribute to building civil preparedness in Tomelilla and Simrishamn Municipalities.

Our municipalities share a joint security and emergency preparedness function, whose primary mission is to work preventively and capacity-building within the security and preparedness sector. This joint municipal function operates based on laws and regulations, nationally established methodologies, and serves as a driving support for the operations in each respective municipality. We are consolidating our efforts now and need to strengthen our team with additional staff.

Responsibilities

As a Data Protection Officer and Information Security Coordinator, you will be part of the cross-municipal function with employment in Tomelilla Municipality. The role requires an interest in the entire security and preparedness area, with a primary focus on information security and data protection. The role involves significant collaboration within the function as well as with internal and external stakeholders.

Your responsibilities include, but are not limited to:

• Ensuring that personal data is processed correctly and legally.
• Monitoring internal compliance with the Data Protection Regulation (GDPR) and reporting any deficiencies and development needs.
• Developing and revising governing documents, processes, and methodological support within the field.
• Assisting in the implementation of Data Protection Impact Assessments (DPIA) and providing advice during personal data incidents.
• Identifying training needs and planning and conducting training and workshops.
• Collaborating with and serving as the contact person for the supervisory authority (The Swedish Authority for Privacy Protection).
• Being accessible to registered individuals who wish to exercise their rights or have questions about data processing.
• Conducting and coordinating information security activities.
• Monitoring changes in legislation and events in the external environment, and training managers and employees in your area.
• Working with processes and methods to implement information classification and risk analyses for information security.
• Classifying and assessing risks for information and systems.

Qualifications

To be considered for the position, you must have a relevant higher education degree and/or university education, or other training deemed suitable by the employer, as well as good knowledge of relevant legislation.

To handle the assignment, you need experience and competence in information security and data protection. Experience in the following areas is meritorious:

• Working with societal security and emergency preparedness.
• Exercises and exercise leadership.
• Security protection.
• Public administration or politically governed organizations.

We are looking for a courageous person who thrives in a driving role and has a strong focus on strategy and results. The role requires the ability to prioritize effectively and create structure in complex situations. It is important to remain calm and act methodically even during time-critical events.

Good communicative and pedagogical skills are valued, especially when explaining processes and decisions (why, what, how). The work also requires good administrative skill and the ability to work both independently and in groups and networks. Flexibility and the ability to switch between strategic and operational tasks are prerequisites.

Other requirements:

• Good proficiency in Swedish, both orally and in writing.
• The position is security-classified and requires Swedish citizenship.
• A security check according to the Security Protection Act will be conducted before a decision on employment is made.
• A B-class driver's license is required.

You are expected to take responsibility for your own competence development in line with the organization's needs. It may also become relevant to serve as an official on call for emergency preparedness.

Employment Conditions

• Type of employment: Permanent position.
• Duration: Permanent.
• Start date: As agreed.
• Tomelilla Municipality has a smoke-free workplace policy.

Employees are sought subject to the condition that the position does not need to be filled by already employed staff or persons with priority rights.

To ensure the quality of the recruitment process and enable good communication with our applicants, the application must be submitted digitally via Visma Recruit and not via email or paper format. If you have protected personal data, you should not apply via Visma Recruit, but contact HR Recruitment via the switchboard at 0417-18 000.

In connection with the recruitment work, Tomelilla Municipality has taken a stance on desirable recruitment channels and marketing. We therefore expressly decline contact with media sellers, recruitment sites, and similar services.