Vacant job

At Avaron, you get the security of a permanent position combined with the variety of working on-site at different clients. We recruit specialists in everything from technology, IT, and industry to project management and business support – and regardless of the assignment, you have a consulting manager who is there for you and your development.

You will step into a socially important initiative where municipalities, regions, and relevant authorities collaborate to strengthen the joint cyber security capability. The focus of the role is to develop a well-founded decision basis for a sector-wide model for supplier follow-up and auditing within cyber security.

Here you will work with issues spanning needs analysis, model development, collaboration, and practical feasibility. The goal is to create better conditions for coordinated and reusable supplier audits with higher quality and less duplicate work. You will become an important part of a cross-functional team where cyber security meets law, procurement, and business development, and you will work closely with both subject matter experts and project resources.

This is an exciting opportunity for you who want to influence how joint cyber security working methods can function in practice on a large scale.

• You investigate the needs, prerequisites, and obstacles for sector-wide supplier follow-up within cyber security.
• You analyze what is required to enable joint audits, focusing on organizational and practical aspects.
• You map relevant state initiatives, roles, and responsibilities to ensure the proposed model works in its context.
• You analyze market offerings and assess what is suitable for joint solutions versus local handling.
• You develop proposals for a model for sector-wide supplier follow-up.
• You design working methods for joint audits, including roles, responsibilities, and lifecycle.
• You develop methodology, templates, and support that can be used in the implementation of audits.
• You describe how experiences and audit results can be reused within the sector.
• You analyze the need for technical support systems and formulate an overall requirement picture for functions such as information sharing, reuse, structuring of results, and supplier dialogue.
• You drive your parts independently while working closely with municipalities, regions, authorities, and other competencies in the team.

• Documented experience of supplier auditing or third-party risk within IT or cyber security.
• Experience in methodology development within cyber security or information security.
• Experience in a similar assignment.

• Experience in developing or implementing joint models, standards, or working methods.
• Experience in supplier dialogue in larger organizations.
• Experience in applying frameworks, standards, or regulations for systematic management, follow-up, and auditing of suppliers, for example within DORA or PCI DSS, including experience equivalent to PCI QSA.

• Permanent employment at Avaron AB.
• Pension benefits.
• Wellness allowance of 5,000 SEK per year.

We are hiring continuously – please apply as soon as you can.