Data Protection Coordinator with Information Security Focus

Göteborgs Stads Leasing AB · Full-time

Göteborgs Stad, Göteborg, Sweden

Gothenburg City Leasing AB, GSL, is an internal municipal company in the City of Gothenburg. We offer smart solutions in leasing, deliveries, reuse, and circular economy. With our services, administrations and companies can lease, transport, and circulate in a resource-efficient manner. We deliver food to children and the elderly. We ensure that furniture, computers, electric vehicles, and defibrillators are available where needed. Our mission is to keep everyday life running smoothly. So that everyone working in the City of Gothenburg can make a difference. Today and tomorrow. That's why we never stop looking for new ways to contribute to sustainability. We make Gothenburg more sustainable every day. Responsibilities Are you an expert at the intersection of data protection and IT security? We are looking for a Data Protection Specialist who can translate GDPR requirements into concrete technical security measures. You will work operationally with risk and impact assessments (DPIA), ensure technical safeguards, and be our internal expert in protecting sensitive information from unauthorized access. GSL provides multiple systems and services used by operations throughout the City of Gothenburg. The role therefore includes analysis, documentation, and development of the management of both existing and new systems as well as personal data processing. A central part of the assignment is to map personal data processing and investigate responsibility relationships. The role also includes assessing the need for and reviewing, establishing, and updating data processing agreements. The work involves ongoing dialogue with suppliers and other contracting parties in both Swedish and English. The responsibilities include information classifications, risk analyses, threshold analyses, and impact assessments (DPIA) related to personal data processing. Further, mapping and assessment of supply chains, any third-country transfers, and technical and organizational security measures are included. The role also covers issues related to purpose limitation, data minimization, retention periods, and deletion. The work is driven independently from identified need and analysis to action, documentation, and follow-up. Close and ongoing collaboration takes place with the City of Gothenburg's Data Protection Officer (DPO) to ensure that GSL's operational work aligns with the city's overarching guidelines and legal requirements. The position also involves participation in a team responsible for property, security, and archive matters. An important part of the role is contact with the IT and digitalization function, where the focus is on ensuring that technical solutions are designed with privacy by design and that security measures are practically feasible. Qualifications For this position, higher education or post-secondary education with relevant focus is required. Several years of professional experience in data protection, information security, or related field may be assessed as equivalent. The role requires good knowledge of data protection and relevant legislation as well as experience applying laws and requirements in practice. Good knowledge of GDPR and experience independently conducting analyses and assessments related to personal data processing are prerequisites. Experience with threshold analyses and impact assessments as well as reviewing, establishing, and updating data processing agreements is required. The role also requires the ability to understand and assess agreements in Swedish and English as well as confidence in dialogue with suppliers and other contracting parties. Good knowledge of information security and risk management as well as experience with information classifications and risk analyses are important for the position. Also required is the ability to map supply chains and assess issues regarding third-country transfers and security measures. Knowledge of the Cybersecurity Act, the AI Regulation, and public access and confidentiality legislation is a merit. Experience from public sector operations is also a merit. The position requires good ability to express yourself orally and in writing in Swedish as well as to read, understand, and work with agreements and other relevant materials in English. As a person, it is important to be structured and thorough with the ability to independently drive work forward. The role requires the ability to tackle complex issues, identify what needs to be done, and translate analyses into concrete actions. Since the position involves many contact points, good teamwork skills and the ability to build trustful relationships are important. A pedagogical approach and ability to explain legal and security-related issues in a clear and understandable manner are also central. The role also requires flexibility and the ability to prioritize different tasks based on operational needs. Great weight will be placed on personal suitability. Before employment, a background check may be requested. Open to All We focus on your competence, not your other circumstances. We are open to adapting the role or workplace to your needs.