Certification and IT Security Architecture in Cybersecurity

Responsibilities

• ▹Independent review and assessment of products and systems from a cybersecurity perspective
• ▹Support customers through the whole certification process, from early requirements analysis and preparation to review and assessment of security evaluations
• ▹Contribute to developing Combitech's EUCC and Common Criteria offering
• ▹Review and assess evaluation reports from Combitech's evaluation laboratories, ensure certification documentation meets EUCC and Common Criteria requirements, and make or prepare the basis for certification decisions
• ▹Interpret and apply national and European cybersecurity requirements
• ▹Take part in technical meetings with customers, laboratories and authorities
• ▹Develop processes, methods and governing documents
• ▹Monitor developments in EU cybersecurity certification and related standards
• ▹Participate in audits, accreditations and quality reviews
• ▹Independent review against frameworks and systems such as KSF, ISA, ISK and NIST 800-53, optionally combined with IT security architecture work

Requirements

• ▹Technical background and understanding of areas such as cryptography, networking, identity and access management and cloud services
• ▹Strong interest in cybersecurity, product security and security evaluation
• ▹Fluent Swedish and English, spoken and written
• ▹Willingness to undergo a security clearance with register check (the work is covered by defence secrecy)

Nice to have

• ▹Previous experience or knowledge of EUCC, Common Criteria or other certification frameworks
• ▹Experience in requirements management, review or auditing
• ▹Ability to analyse complex technical solutions from a security perspective

Soft skills

What we offer

• ▹A workplace that makes it easy to combine work with everyday life
• ▹A stable foundation with the defence and security group Saab as owner, and job security

About the company

Combitech is a consulting company owned by the defence and security group Saab, with customers in the defence industry, government agencies, critical infrastructure and the private sector.