Senior IT and Information Security Consultant

About Us
We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence.

As a trusted voice for many of the world's most successful organizations, we use our knowledge to advance safety and performance, set industry benchmarks, and inspire and invent solutions to tackle global transformations.

About The Role
DNV Cyber AB
is a leading cybersecurity company within the DNV family, operating globally in over 100 countries. We specialize in enhancing cybersecurity resilience for our clients, protecting them against the constantly evolving cyber threats, and ensuring both IT and information security at all levels.

We are looking for an experienced
IT and Information Security Expert
with a strong background in both IT security and information security. In this role, you will be expected to integrate security measures into IT solutions at a tactical and strategic level, ensuring that both IT and information security are comprehensive and effective.

Key Responsibilities

• Develop and implement IT and information security strategies that ensure robust solutions and compliance with industry standards and regulations, including ISO 27001, NIST, TISAX, DORA, and NIS2.
• Conduct risk assessments, vulnerability analyses, and perform security tests on IT systems and applications.
• Ensure the protection of the organization's IT infrastructure against cyberattacks by implementing appropriate security controls and solutions.
• Enhance and manage security solutions for both internal and external IT resources, including cloud services and network infrastructure.
• Work closely with both IT and information security teams to ensure all systems are aligned with company requirements and external regulations.
• Contribute to compliance with regulations such as DORA and NIS2, guiding clients through these security and compliance requirements.
• Lead and support security incident management and investigations to quickly identify and address security issues.

Visit our website to get to know more about us

Location: Stockholm/Solna, Sweden.
A security background check will be a part of the recruitment process.

What we offer

At
DNV Cyber
, we are passionate about cybersecurity and take pride in the way we are impacting the society we live in. We encourage you to excel professionally through knowledge sharing and demanding cases. At DNV Cyber, you'll have 500 colleagues who share an interest in cyber security with you.

At
DNV Cyber
, you will have the opportunity to work on a variety of cases and customers from various industries. You will be working in an international environment with global opportunities to advance in your career. With us, you will be surrounded by the most talented people in the cyber security field. We encourage you to keep challenging yourself by exploring new areas of expertise.

Join us on an exciting adventure of growth, meaningful work, and shaping the future through cyber security
DNV is an Equal Opportunity Employer and gives consideration for employment to qualified applicants without regard to gender, religion, race, national or ethnic origin, cultural background, social group, disability, sexual orientation, gender identity, marital status, age or political opinion. Diversity is fundamental to our culture and we invite you to be part of this diversity.

Requirements
About you

• Extensive experience in implementing IT and information security solutions at a strategic level. (+5 years)
• In-depth knowledge of IT security, including network, system, and application security.
• Experience leading risk assessments, penetration testing, and other security evaluations to identify and address vulnerabilities.
• Strong understanding of compliance and ensuring adherence to standards such as ISO 27001, NIST, TISAX, DORA, and NIS2.
• Expertise in cloud security and managing IT security solutions for both internal and external services.
• Ability to develop and implement security policies and guidelines.
• Ability to collaborate with both technical and non-technical teams to ensure security requirements are understood and followed.
• Fluent in both Swedish and English, with strong verbal and written communication skills.

Desirable Experience:

• Experience in managing and implementing security solutions for cloud infrastructures (e.g., AWS, Azure, GCP).
• Certifications in IT and information security such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer.
• Experience working with regulatory requirements such as DORA, NIS2, and GDPR.
• Practical experience in managing and leading security incident response and handling advanced security incidents.

Personal Attributes

• Analytical and solution-oriented with a strong focus on identifying and addressing security issues.
• High integrity and the ability to work independently and drive projects forward.
• Strong communication and collaboration skills to effectively work with internal and external stakeholders.

Engaged and proactive with a continuous focus on improving and developing security.