Head of IT Security

As the Head of IT Security at SAS you will be responsible for our IT security & compliance department. It is a leader role that is expected to drive the overall IT security agenda, working closely with the members of the Digital & IT leadership team. Our view is that the Head of IT security needs to collaborate deeply with the other departments, setting requirements and policies but also ensuring that the teams get the practical support they need to keep our environment secure together with the IT security resources.

You will play a key role in driving and implementing security best practices, managing the 24/7 security operations center and ensuring that we are compliant to the relevant security standards.

About the Team
Digital & IT is the organization responsible for all development, maintenance and operations of applications and technology services within SAS. The setup is a mix between in-house development, COTS products and SaaS solutions. A key focus is also on how we are a good partner to our colleagues around SAS on technology related topics
Challenges you will work on:
• Managing our overall cyber security strategy and governance framework covering both traditional ITIL based service delivery and modern DevOps ways of working
• Ensure an efficient risk management framework to ensure that SAS understands their cyber security/ IT risks and work to make it a natural part of our daily business
• Manage the central security team and ensure that the teams across digital & IT get the support and knowledge they need to develop and operate secure solutions
• Continuously improve and evolve our 24/7 security operations center to ensure that we can act on the threats towards our environment
• Be responsible and evolve the CSMS to ensure that we are compliant with the different regulations (NIS2, Part-IS etc.)
• Be an advocate of Security in the organization, creating community around security topics and adopting security best practices across the organization.
• Collaborate on topics related to disaster recovery, threat modeling exercises, and other security-related activities across the organization

To be successful, we believe you have:
• Bachelor's or master's degree in computer science, Software Engineering, or relevant experience.
• Proven experience (min. 10 years) in IT security roles, with a strong understanding of cybersecurity principles, protocols, and technologies.
• Leadership experience
• Experience with security tools and technologies, such as SIEM solutions, endpoint protection platforms, identity and access management systems, and network security appliances.
• Hands-on experience with cloud security practices, cloud well architected framework, and security best practices used in cloud environments.
• Knowledge of relevant regulatory frameworks like NIS2, Part-IS GDPR and industry standards (e.g., NIST, ISO 27001/2) and what it takes to comply.
• Effective communication and interpersonal skills to collaborate effectively with cross-functional teams and stakeholders.
• Strong problem-solving abilities, pro-active, data-driven mindset to identify the areas
• Drive initiatives in collaboration with the team members, other security representatives and stakeholders.
• A team player, positive attitude, helping and coaching team members.
• Passionate about IT security and thrive on the dynamic challenges posed by the ever-evolving cyber threat landscape.

Is this you? If so, come fly with us!
Please send your CV as soon as possible. Interviews are conducted continuously, and the position may be filled before the application deadline (2024-10-28). We look forward to hearing from you!

Why SAS?
At SAS, we offer extensive opportunities for professional development in an international, fast-paced working environment. We are dedicated to the continuous growth of our employees. Working with us comes with a variety of benefits, including:
• Travel Perks: Enjoy discounted travel opportunities around the world with SAS.
• Health & Wellness: Access to health and wellness benefits, including a newly renovated gym with complimentary classes such as CrossFit and yoga.
• Discounts: Receive discounts from a wide range of brands, as well as on transportation to and from airports, airport shops, hotels, and car rentals.
• Work Environment: Our office location in Frösundavik offers a vibrant workspace with a restaurant, café, and easy access to outdoor activities in Hagaparken and Brunnsviken. Engage in running, tennis, outdoor gym sessions, kayaking, and stand-up paddling with equipment available free of charge.
• Convenient Commute: Benefit from a non-stop bus service connecting our office to Central Station, Solna station, and commuter trains, alongside a network of cycle paths.