IT Security Specialist

Vattenfall AB · plný úvazek

Stockholm, Švédsko

Company Description Vattenfall is one of Europe's largest producers and retailers of electricity and heat. Our main markets are Sweden, Germany, the Netherlands, Denmark, and the United Kingdom. Within the Vattenfall Group, there are approximately 21,000 employees. We have electrified industries, delivered energy to homes, and transformed life through innovation for over a hundred years. About the Role As an IT Security Specialist with a focus on security architecture, you will become a key person in developing and strengthening security in our IT environments and digital services. You will be an important advisor to business units, projects, operations, and IT deliveries to ensure that security is integrated from idea to implementation. The role will primarily work to strengthen the team working on development initiatives and IT projects. You will be part of the IT Security department and work together with architects, security specialists, system administrators, project managers, and other experts to create sustainable and secure solutions in an operation that is critical to society's function. Your responsibilities will include: Work on developing and advancing security architecture, security patterns, guidelines, and methods that ensure security is integrated into IT solutions from the start. Support IT projects toward secure IT delivery together with architects, project managers, and the business. Drive and develop security work together with the business's IT delivery and project portfolio. Contribute to developing security capabilities within both IT and OT-adjacent environments and support work on managing new threats, risks, and security requirements. Work on advancing internal requirements through, for example, strengthening procedures, clarifying security requirements, and ongoing business-focused work. Conduct security reviews, classifications, risk and vulnerability analyses, and recommend measures. Proactively work with vendor management in IT/Information Security, such as monitoring requirements, establishing processes for working with internal requirements, etc. Requirements Specification We are looking for someone who is self-driven and takes responsibility for driving matters forward, particularly within IT development initiatives. You have strong analytical abilities and can translate complex issues into clear recommendations. You work in a structured and methodical manner even when circumstances change, communicate confidently with both business and technical organizations, and have a pragmatic, solution-oriented approach where security requirements are balanced against business needs. We would like you to have: Post-secondary education in IT, computer science, or systems science, or equivalent work experience. Experience in IT security, information security, or security architecture and advisory in complex IT environments. Experience conducting security reviews, risk analyses, and security assessments. Experience translating security requirements into practical and business-adapted solutions. Experience working with established standards and regulations such as ISO 27001, NIS2/Cybersecurity Act, security protection legislation, or equivalent. Good understanding of identity management, access control, and modern security principles. Swedish and English, spoken and written. Meritorious: Security work within energy, electricity distribution, or other critical infrastructure, or experience from work with IT/OT operations. Technology and platform-specific competence: network/segmentation, IAM/MFA, Windows/Linux hardening, cloud (Azure/AWS), logging/monitoring, data/data lake environments, DevSecOps, and secure delivery pipelines. Security architecture at enterprise-wide level. Certifications: CISSP, GIAC, CISM, or equivalent. Security testing (requirements specification for penetration testers, code reviews, scanning) and vulnerability management. Experience with major business/ERP platforms (e.g., SAP) and/or AI-related security issues. Work with security matters in regulated sectors where regulatory oversight and government communication have been relevant. Additional Information Beyond the opportunity to shape the future of smart energy society, we offer you a challenging and varied work with many points of contact. At Vattenfall, it is important that work and private life have a good balance, which is why we offer flexibility in work and the opportunity to work from home when needed. We also offer a range of other employee benefits such as reduced working hours, favorable occupational pension agreements, parental leave supplements, and more. Read more about our benefits here. Work Locations Solna, Luleå, or Trollhättan. Business travel may occur. For more information about the position, contact recruiting manager Filip Hammarlund, [email protected]. For questions about the recruitment process, contact recruiter Julia Norberg, [email protected]. Trade union representatives via Vattenfall's switchboard. Christian Ericsson – Ledarna, Anne-Marie Sjöbohm – Akademikerna, Asim Nokic – Unionen, Ulf Tengman – SEKO. Welcome to apply by September 13, 2026. Selection and interviews are ongoing. We only accept applications via our website. We do not accept personal letters in applications. Apply quickly and easily by answering screening questions and attaching your CV. At Vattenfall, we value being active, positive, open, and security-conscious. We seek employees who share our vision and can contribute to strengthening our corporate culture. We are convinced that diversity contributes to building a more profitable and attractive company and strive to be good role models when it comes to diversity. Vattenfall actively works to ensure that all employees have the same opportunities and rights regardless of age, ethnic or cultural background, gender identity, religion/belief, sexual orientation, or functional variation. Read more about how we work with diversity and inclusion here. Since security for Vattenfall and its employees is critical, we will conduct a "pre-employment screening" before each employment. These checks are based on the role you will fill at Vattenfall. Working at Vattenfall means working with critical societal infrastructure. Therefore, many of our positions are classified as security-sensitive, and you may be subject to civil protection placement. If this position is classified, a security vetting will be conducted before employment, in accordance with the Security Protection Act. Any civil protection placement will be made in support of the employment agreement and the Civil Defense Act. We look forward to your application!