Information Security Specialist for a Government Agency

Responsibilities

• ▹Carry out and support threat, risk and vulnerability analyses
• ▹Perform protection-value analyses and security analyses
• ▹Identify relevant security measures based on the analyses
• ▹Develop and formulate IT security requirements
• ▹Assess secure design and architecture of IT systems and technical platforms
• ▹Carry out security assessments when introducing new technology, IT systems and platforms
• ▹Assess how security requirements can be turned into technical and organisational measures
• ▹Document analyses and assessments in reports, opinions and decision material
• ▹Present and gain buy-in for analyses, recommendations and security measures with stakeholders
• ▹Train and share knowledge in IT and information security
• ▹Collaborate with architects, technical specialists and business representatives

Requirements

• ▹Very good command of Swedish in speech and writing
• ▹At least 9 years of documented experience as an information security specialist or equivalent, mainly within the last 10 years
• ▹At least 8 years of practical experience acting as an expert in complex IT security assignments
• ▹At least 8 years of practical experience with threat, risk and vulnerability analyses
• ▹At least 8 years of experience defining requirements for secure design and architecture of IT security solutions and IT systems
• ▹At least 8 years of experience with security assessments when introducing new technology, platforms and IT systems, based on risk analyses and security requirements
• ▹At least 5 years of experience in areas such as IP/internet, WAN, vulnerability scanners, IDS/IDP, PKI and directory services
• ▹At least 5 years of experience in organisations handling security-classified information
• ▹Competence level 4: very high expertise and strong ability to work independently

Nice to have

• ▹Experience preparing security approval of security-protected IT systems together with a supervisory authority
• ▹Experience from the justice system
• ▹Experience from the public sector, preferably larger organisations
• ▹Information security certification, such as CISSP or equivalent

Soft skills

About the company

Soros Consulting is a consulting and recruitment firm matching experienced specialists with qualified assignments in IT, information security, engineering, finance and business development.