Head of Corporate IT Security

As Head of Corporate IT Security, you are the main contact for corporate IT security within Schibsted. You support not only Schibsted Enterprise Technology, which delivers the central IT solutions for Schibsted, but also the local IT organizations in the different Schibsted Brands across the Nordics.

Head of Corporate IT Security is an important role within the central Data Security team and is responsible for analysing systems, networks, endpoints and data in our strive for increased availability, confidentiality, integrity and traceability.

The role includes the responsibility to create and present reports and show areas in need of improvements. This is in order for Schibsted teams and businesses to properly prioritize IT Security tasks and actions more efficiently. You will also be an important resource in automating our platform for a more continuous and up-to-date environment in this area.

The role requires problem-solving skills as you need to act efficiently and respond to security alerts and target solutions together with other members in the Data Security Team and other teams across Schibsted. Details are important in this job, as some issues, attacks and vulnerabilities are difficult to detect and could affect the safety of the company’s data and services.

As part of a dynamic and exciting IT operations environment, you will support some of the most prominent Internet based services and media houses in the Nordic Region. You will get the opportunity to work in a strong and experienced IT organization based in central Stockholm and Oslo, with colleagues in the server-, network-, storage- and client areas all working in a global environment.

Your main responsibilities are to:

-
Function as the main security contact on corporate IT security issues, in cooperation with Schibsted management, business brands and third party service providers.

-
Be the main contact to our MSSP/SOC, own and develop the service.

-
Own and develop authenticated vulnerability scanning service.

-
Own and develop the EDR platform and operation.

-
Maintain Disaster Recovery/Business Continuity Planning and conduct annual exercises.

-
Ensure systems and networks are secured and monitored.

-
Develop and present reports on areas that need security improvements.

-
Participate in architecture sessions. Identify gaps and areas of improvement from a security perspective.

-
Be part of security breach investigations internally as well as with 3rd party service providers.

-
Oversee penetration testing efforts and reach conclusions together with external providers.

-
Research security enhancements and make recommendations to management.

-
Stay up-to-date on information technology trends and security standards.

-
Gather business requirements and produce a high-level architecture to support business needs.

-
Being a driving force in transforming our IT Security delivery to a next generation modern platform.


Required skills and expertise:

-
Bachelor's degree in computer science or similar

-
Experience in information security or related fields

-
Understanding of concepts such as firewalls, proxies, SIEM, antivirus, EDR, DLP and IDS

-
Ability to identify and mitigate vulnerabilities and explain how to avoid them

-
Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact

-
Curious with a ”willingness to learn” mentality

-
Fluent in English

-
Great team player

-
DevOps mentality: automate everything!


Meriting Qualifications:

-
Experience Checkpoint, scripting, general networking, Ansible, Python, Linux, AWS

-
CISSP or similar certifications


We offer you:

-
The opportunity to work in a modern IT environment with a strong drive to innovate technologically

-
An exciting position in the heart of one of the biggest media and tech companies in the Nordic region

-
Amazing colleagues

-
Plenty of challenges and opportunities

-
Personal development plan


This role reports to Ralph Benton, Schibsted CISO.

Schibsted is a family of digital brands with a strong Nordic position, and more than 5,000 employees. Millions of people interact with our companies every day through our leading online marketplaces, world-class media houses. We also help new promising businesses grow. Our joint mission of empowering people in their daily lives is rooted in the values of our media heritage and a legacy of bold change. At our best, we are a fearless force for change in a society built on trust and transparency.

Data & Tech is a central product and tech unit that serves all of Schibsted. We are about 250+ people in Oslo, Stockholm and Krakow, and collaborate closely with other product and tech teams in all units in Schibsted. Areas of responsibilities include data & technology strategy, privacy/data trends/responsible data & machine learning, information security and internal IT.