Vacant job

About the Assignment

We are recruiting on behalf of our client for a Senior IT Security Expert to support a project team consisting of project managers, requirement specifiers, IT, and procurement functions in the procurement of a real-time supported integration platform. This platform will include an Asset Information Management (AIM) system, a Computerized Maintenance Management System (CMMS), and a Document Management System.

The assignment is based on the premise that information security, interoperability, and data governance should be handled as a cohesive capability – not as separate parts. You will become a key person in ensuring that the systems being procured do not limit the organization's opportunities for integration, data sharing, and further development, but instead form a stable and secure foundation for future digital ways of working.

Background

The Water and Wastewater Department is conducting a procurement for an Asset Information Management (AIM) system, a Computerized Maintenance Management System (CMMS), and a Document Management System built on a future-proofed integration engine. These systems will handle business-critical information and place high demands on information and IT security in relation to the systems' interoperability and information flows.

What You Will Do

• Provide support in Information Security Analysis (ISA) and translate findings into concrete requirements
• Develop and quality-assure security requirements for the procurement
• Support the formulation of requirements in tender documents and contracts
• Provide advice on security in integrations and the supply chain
• Support the evaluation of bids from a security perspective

You will contribute to a consolidated requirements picture that ensures, among other things:

• That systems and integrations are interoperable and can exchange data in a standardized and secure manner
• That data can be used across system boundaries without manual steps
• That the architecture supports real-time data and continuous data flows
• That the solution is future-proof regarding analysis, automation, and upcoming legal requirements
• That security requirements are designed to enable – not hinder – secure interoperability
• Architecture principles for segmentation, zoning, and controlled data flows between IT and OT, in line with standards such as IEC 62443
• Requirements for information ownership, data governance, and traceability
• Security throughout the entire supply chain, including third-party integrations and subcontractors
• That requirements can be verified, monitored, and revised over time

Deliverables

• Analysis and recommendations on how security, integration architecture, and data models interact
• Proposals for security requirements in procurement documents
• Input for contractual terms regarding information and IT security
• Evaluation support during bid assessment
• Recommendations regarding the follow-up of security requirements

Who We Are Looking For

Required Qualifications:

• Experience with information security in public sector operations
• Experience with integration architecture, API strategies, and interoperability in complex IT/OT environments
• Knowledge of data models and information structures linked to business systems
• Experience with secure data sharing in systems with real-time integrations
• Experience with requirement specification in IT procurement
• Experience with relevant standards, e.g., ISO 27000 series
• Good knowledge of legal requirements, GDPR, and OSL

Meritorious:

• Experience with procurement in the public sector and/or implementation of business systems
• Experience with security in cloud services and integrations
• Knowledge of NIS2/cybersecurity regulations
• Experience from critical societal functions, e.g., Water and Wastewater (VA)

Practical Information

The assignment is carried out in close collaboration with project management, IT, and procurement functions. The assignment does not include technical operations or system implementation. The procurement is expected to be completed during Q2 2027, after which the organization will enter the implementation phase.

Apply today – selection is ongoing.