Information Security Handler for the Education Administration

Stockholms kommun · Full-time

Box 22049, Stockholm, Sweden

Stockholm – our capital with millions of dreams, expectations, and ambitions. We work for everyone who lives here today and in the future. Now we're looking for you who want to think big, new, and differently with us – for Stockholmers. Do you have previous experience with information security or data protection issues and are looking for your next step? With us, you are offered an operations-close and consultative role where you can develop your expertise and contribute to secure and sustainable information security work for Stockholm's schools. Welcome to Us As an information security handler, you will work from our office centrally located on Kungsholmen. You will be part of the unit for digital educational support and the development and coordination department. Within the department, responsibility lies for information and communication technology, research and development, as well as monitoring and analysis to support Stockholm's municipal and independent schools. Here you will join a competent work group of 15 people who strive to contribute to stable system support and platforms used throughout the school system. We are now looking for a new colleague to the group with the task of supporting and guiding staff within the Education Administration's information security work. What We Offer You Opportunity to work from home when work allows it to promote work-life balance Wellness allowance and discounted rates at the city's own fitness and swimming facilities Generous flexible hours and the opportunity for more vacation days through vacation exchange Read more about the benefits of working within Stockholm City here The Role and Responsibilities Digitalization is in full progress and it is of utmost importance that technology does not outpace information security. You will have an important supporting function and close collaboration with the Education Administration's Data Protection Officer (DPO) and Information Security Manager (ISAM). In short, your task is to provide support and guidance, primarily to the Education Administration and the units responsible for system management of the IT systems used by the city's all educational activities (primary school, secondary school, adult education, Swedish for immigrants, preschools, and the culture school). Together with the department's other functions in information security and data protection, you will continuously review risk management and the use of information handled in the Education Administration's IT systems and cloud services. As an information security handler, you will: be the unit's contact person toward the DPO and ISAM be a support in the work with information classifications, impact assessments, action plans, risk analyses with regard to data protection and information security assist system management and projects in the work with information security, information classifications and risk, vulnerability analyses, and various security analyses assist system management in handling personal data and information security incidents explain how processes, methods, and models within the framework of information security should be followed within the system management area ensure that information security and GDPR requirements covered by IT components (e.g., signing of data processing agreements) are met Your Competence and Experience We are looking for you who have: a completed post-secondary education in information security, data protection, or alternatively other education or experience that the employer deems equivalent multi-year and current experience with information security work in a large and complex organization, preferably from a role as an information security handler, data protection officer, or equivalent experience in providing support and advice regarding laws, regulations, and guidelines within the security area provided methodological support in information classifications and risk and vulnerability analyses experience in preparing various types of information security documentation knowledge and insight into working with GDPR and the NIS2 Directive good knowledge of Swedish and English in both speech and writing It is advantageous if you have: current experience from work within a public, municipal, or politically governed organization experience working with management systems in accordance with the ISO 27000 standard family As a person, we are looking for you who thrives in a consultative role and who in a pedagogical and humble way can make complex information easy to understand. We are looking for you who finds it easy to collaborate with others and who contributes to a unpretentious and open climate in the work group. At the same time as you value time together, you are comfortable independently planning, taking responsibility for, and driving your own processes forward. You are attentive and responsive to the operations and maintain engagement in tasks even when facing challenges and setbacks. Other Information We are recruiting without a cover letter in this recruitment to strengthen focus on the competencies and experiences required for this role. In assessing your application, we will only base our evaluation on your CV and a number of questions you will answer when applying for the position. We ask that you answer the questions concretely and concisely, and that there is a clear connection between your answers and your CV. We see diversity as enriching and welcome all applicants regardless of gender, gender identity or expression, sexual orientation, ethnicity, religion, disability, and age. Stockholm City works with competence-based recruitment that aims to ensure that each person's competence is considered and thus counteract discrimination. Remember never to upload a police certificate extract (Data Protection Regulation, GDPR) in connection with your application. To work at our schools, you are required to present a valid extract from the police's criminal record register and suspicion register before offering employment. Within the Education Administration, we apply individual salary setting regulated by HÖK and General Provisions (AB).