Senior IT Security Officer

Do you want to work internationally on securing our IT landscape? Both act in projects as our IT Security Officer and in others provide internal Consultancy?

IT Security is continuously increasing its importance at Vattenfall. Our highly secured assets are spread over different European countries; the fast-evolving digitalization, cyber threats, and local security regulations make our work both challenging and interesting.

Your responsibilities

You will work in an international team of experts in IT Security. We advise and steer on group policy towards all levels of the organization and external partners. You will:

• Identify, assess, and report IT Security risks
• Perform security reviews and threat modelling sessions, as well as report the findings on a risk-based approach
• Develop IT security standards and guidelines
• Validate and assess the risk for certain IT security changes
• Ensure compliance with IT Security standards
• Embed security in IT architectural building blocks and solution designs
• Develop IT security architecture and initiate security improvement initiatives
• Consult and guide the Security Operations teams based on the Cyber Kill Chain Models and Cyber Threat Intelligence

We are looking for an experienced and ambitious person who is not afraid of asking critical questions and who constantly strives for improvement. You will bring:

• A Bachelor or Academic degree
• At least five years of experience in a security expert role in an international or corporate environment

Ideally, you also bring:

• Working knowledge of cybersecurity principles, techniques, and technologies
• Experience in application security and network security related concepts
• Deep understanding of how threat actors operate, execute their kill chain, and laterally move within the network
• Experience in the creation of a secure software development lifecycle
• Experience in Cloud Security on Microsoft Azure
• Good understanding of how operating systems such as Windows and Linux work and how to implement security hardening
• Experience in relevant IT/Information Security legislations in the European countries where Vattenfall operates
• Good knowledge of relevant standards, such as ISO27001/2, NIST, CIS
• Relevant IT Security certifications are a plus (e.g. CISSP, CSSLP, GWEB, GWAPT)
• Other relevant cybersecurity certifications are a bonus (e.g. CISM, CISA, CRISC, OSCP)

As a person, we are looking for you who is structured and a good planner. In this position, you will work together with many different people and stakeholders, which is why we value great collaboration skills. We believe you are a trustworthy person who is honest and has integrity.

Vattenfall is one of Europe’s largest producers and retailers of electricity and heat. Our main markets are Sweden, Germany, the Netherlands, Denmark, and the UK. The Vattenfall Group has approximately 21,000 employees.

For more information about the position you are welcome to contact Recruiter Folmer Koper via e-mail: folmer1.koper@vattenfall.com