IT Security Specialist

Vattenfall AB · plný úvazek

Luleå, Luleå, Švédsko

Company Description Vattenfall is one of Europe's largest producers and retailers of electricity and heat. Our main markets are Sweden, Germany, the Netherlands, Denmark, and the United Kingdom. Within the Vattenfall Group, there are approximately 21,000 employees. We have electrified industries, delivered energy to homes, and transformed life through innovation for over a hundred years. About the Role As an IT Security Specialist focused on security architecture, you will become a key person in developing and strengthening security in our IT environments and digital services. You will be an important advisor to operations, projects, management, and IT deliveries to ensure that security is integrated from idea to implementation. The role will primarily work on strengthening the team that works with development initiatives and IT projects. You will be part of the IT Security department and work together with architects, security specialists, system administrators, project managers, and other experts to create sustainable and secure solutions in an organization that is critical to society's functioning. Your responsibilities include: Work on developing and further developing security architecture, security patterns, guidelines, and methods that ensure security is integrated into IT solutions from the beginning. Support IT projects toward secure IT delivery together with architects, project managers, and operations. Drive and develop security work together with the organization's IT delivery and project portfolio. Contribute to developing security capabilities in both IT and OT-adjacent environments and support work on managing new threats, risks, and security requirements. Work on further developing internal requirements through, for example, strengthening procedures, clarifying security requirements, and ongoing operational work. Conduct security reviews, classifications, risk and vulnerability analyses, and recommend measures. Proactively work on supplier management within IT/Information Security, such as follow-up of requirements and establishing processes for working with internal requirements. Requirements We are looking for someone who is self-driven and takes responsibility for driving issues forward, especially within IT development initiatives. You have strong analytical abilities and can translate complex questions into clear recommendations. Furthermore, you work in a structured and methodical manner even when circumstances change, communicate confidently with both operations and technical organizations, and have a pragmatic, solution-oriented approach where security requirements are balanced against the organization's needs. We would like you to have: Post-secondary education in IT, computer science, or systems science, or equivalent work experience. Experience in IT security, information security, or security architecture and consulting in complex IT environments. Experience conducting security reviews, risk analyses, and security assessments. Experience translating security requirements into practical and operationally adapted solutions. Experience working with established standards and regulations such as ISO 27001, NIS2/Cybersecurity Act, security protection legislation, or equivalent. Good understanding of identity management, access control, and modern security principles. Swedish and English, spoken and written. Meritorious: Security work within energy, power grid, or other critical infrastructure operations, or experience from work with IT/OT operations. Technical and platform-related expertise: networking/segmentation, IAM/MFA, Windows/Linux hardening, cloud (Azure/AWS), logging/monitoring, data/data lake environments, DevSecOps, and secure delivery pipelines. Security architecture at enterprise-wide level. Certifications: CISSP, GIAC, CISM, or equivalent. Security testing (requirements for penetration testers, code reviews, scanning) and vulnerability management. Experience with larger business/ERP platforms (e.g., SAP) and/or AI-related security issues. Work with security issues in regulated industries where oversight and authority communication has been relevant. Additional Information Beyond being part of shaping the future of smart energy society, we offer you a developing and varied job with many points of contact. At Vattenfall, we believe work and private life should have a good balance, so we offer flexibility in work and the opportunity to work from home as needed. We also offer a number of other employee benefits such as reduced working hours, favorable occupational pension agreements, parental leave supplements, and more. Read more about our benefits here. Work Location Solna, Luleå, or Trollhättan. Business travel may occur. For more information about the position, contact recruiting manager Filip Hammarlund, [email protected]. For questions about the recruitment process, contact recruiter Julia Norberg, [email protected]. Union representatives via Vattenfall's main switchboard. Christian Ericsson – Ledarna, Anne-Marie Sjöbohm – Akademikerna, Asim Nokic – Unionen, Ulf Tengman – SEKO. Welcome to submit your application by 2026-09-13. Selection and interviews are conducted on an ongoing basis. We only accept applications through our website. We do not accept personal letters in applications. Apply quickly and easily by answering selection questions and attaching your CV. At Vattenfall, we value being active, positive, open, and security-conscious. We are looking for employees who share our vision and can help strengthen our corporate culture. We are convinced that diversity contributes to building a more profitable and attractive company and strive to be good role models when it comes to diversity. Vattenfall actively works to ensure that all employees have the same opportunities and rights regardless of age, ethnic or cultural background, gender identity, religion/belief, sexual orientation, or functional variation. Read more about how we work with diversity and inclusion here. Since security for Vattenfall and its employees is critical, we will conduct a "pre-employment screening" before each employment. These checks are based on the role you will fill at Vattenfall. Working at Vattenfall means working with critical infrastructure for society. Therefore, many of our positions are classified as security-sensitive, and you may be subject to contingency placement. If this position is security-classified, a security clearance will be conducted before employment, in accordance with the Security Protection Act. Any contingency placement is carried out with the support of the employment agreement and the law on total defense duty. We look forward to your application!