IT Security Business Development Manager

Svenska Kraftnät · Full-time

Sundbyberg, Sweden

Svenska kraftnät is a key player in the energy transition. Our IT division is growing to enable doubled electricity production and a fossil-free future. With new technology, we are increasing both the infrastructure's capacity and the development pace within digitalization and processes. #LI-DNI About the position In this role, you will be active in the IT Security Department's work regarding governance, compliance, and business development within IT security. You will work with strategy, process, and methodology issues, and contribute to the development and monitoring of internal IT security requirements as well as maintain governing documents regarding IT security within the organization. The role also includes tasks to support the IT Security Department in implementing relevant frameworks. Responsibilities: Business development related to IT security and governance, risk management, and compliance (GRC - Governance, Risk and Compliance). Develop governance and working methods for the department's and division's units. Work to ensure compliance with relevant regulations regarding IT and information security. For example, MSBFS 2020:6/7, PMFS 2022:1, and the Cyber Security Act. Work with internal IT security requirements and management and development of governing documents. Advice and support as well as educational initiatives within IT security. Communicate security requirements, risks, and recommendations clearly and contribute to knowledge-building work and increased security awareness. As a business development manager for IT security, you will be a central person in developing effective governance of the IT security area for an IT environment that is essential for electricity supply and, ultimately, society to function. As an employee of the IT Security Department, it is important to be well-informed about the current threat landscape and relevant regulations, standards, and best practices in the field. There are good opportunities to exchange experience and knowledge both internally and with external partners in the industry as well as with other authorities. There are also good opportunities for continuous professional development. The role belongs to the IT Security Governance Unit (ISL), which manages governance and standardization regarding IT security. The unit works with requirements, compliance, and controls within IT security, risk and vulnerability management, and leads the work of establishing new IT security capabilities. The unit is part of IT Security within the IT Division. The unit currently has 11 employees. About you Required qualifications: To thrive in the role, we see that you are structured in your approach—that is, you work according to a clear process and organize and plan your work well. We are looking for someone who is creative and thinks outside the box, considers new approaches, and finds new solutions to old problems. You are also relationship-building and enjoy taking active initiative in social contexts, stepping forward, and find it easy to create new relationships. A solution-oriented approach is also a necessary quality in this work to quickly find solutions to emerging problems. We place great importance on your personal qualities. Further, we see that you have education in information security, IT security, or equivalent competence acquired in another way. You also have: Several years of current, broad IT security work experience in societally important or security-sensitive operations. Documented experience analyzing and interpreting regulatory and legal requirements and translating them into relevant, concrete technical requirements. Several years of work experience applying frameworks and standards such as ISO27000, CIS Controls, or NIST Cyber Security Framework. Very strong ability to express yourself in speech and writing in Swedish and English. Meritorious qualifications: Work experience in public procurement. Work experience in change management in leading roles, or in close cooperation with, for example, CISO and IT Security Chief. Experience with threat analyses and risk and vulnerability assessments. Understanding of the Public Access to Information and Secrecy Act and other relevant legislation for the public sector. Experience with security in OT environments. One or more certifications in information and IT security such as CISSP, CISA, CISM, or ITIL. Good to know The position is located in Sundbyberg. Opportunity for remote work up to 50%, if the work allows. The position is a permanent employment. Application deadline is September 18. Instead of attaching a personal letter to your application, you will answer several questions in the application form. Individual salary setting is applied and is conducted in accordance with central salary agreements RALS/RALS-T. https://www.svk.se/jobba-har/var-arbetsplats/formaner/ For questions, please contact: Jonna Lidman, recruiting manager, 010-489 2515 Maria Sahlén, responsible recruiter, 010 489 20 27 Annika Ingeborn, trade union representative SACO, 010 475 87 72 Erica Midfjäll, trade union representative ST, 010 475 87 31 You can also reach us by email: [email protected]. https://www.svk.se/jobba-har/ We decline direct contact from staffing and recruitment companies and salespeople in connection with recruitment; we have procurement agreements in place for Svenska kraftnät as a state authority. Other information We place high demands on our employees' security and confidentiality awareness. Prior to employment, a security clearance is conducted in accordance with the Security Protection Act (2018:585), which includes a basic investigation and, if the employment concerns a position in a security class, the security clearance will also include a register check. For employment at Svenska kraftnät, Swedish citizenship may be required for certain positions. Employment at Svenska kraftnät includes an obligation for civil defense placement. For more information about personnel security at Svenska kraftnät. https://www.svk.se/sakerhet-och-beredskap/sakerhetsskydd/personalsäkerhet